{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"rust-procs","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NWJSQAGACP63K0K4GV05D2","modified_at":"2026-09-24T08:47:31.392043296Z","published_at":"2026-09-13T11:17:01.967Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-90773","https://security-tracker.debian.org/tracker/CVE-2026-90773"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-90773#Debian:14/rust-procs","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-90773"}],"summary":"procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with malicious ANSI or OSC escape"}