From 63a448387bd2f86d25b00977e4b84d89d86dfae8 Mon Sep 17 00:00:00 2001 From: github-actions Date: Mon, 6 Jul 2026 22:19:54 +0000 Subject: [PATCH] Update OSV exported data --- crates/RUSTSEC-2026-0204.json | 63 +++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 crates/RUSTSEC-2026-0204.json diff --git a/crates/RUSTSEC-2026-0204.json b/crates/RUSTSEC-2026-0204.json new file mode 100644 index 000000000..2fc24a856 --- /dev/null +++ b/crates/RUSTSEC-2026-0204.json @@ -0,0 +1,63 @@ +{ + "id": "RUSTSEC-2026-0204", + "modified": "2026-07-06T22:19:41Z", + "published": "2026-07-06T12:00:00Z", + "aliases": [], + "related": [], + "summary": "Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid", + "details": "Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.", + "severity": [], + "affected": [ + { + "package": { + "ecosystem": "crates.io", + "name": "crossbeam-epoch", + "purl": "pkg:cargo/crossbeam-epoch" + }, + "ecosystem_specific": { + "affects": { + "arch": [], + "os": [], + "functions": [] + }, + "affected_functions": null + }, + "database_specific": { + "categories": [], + "cvss": null, + "informational": null + }, + "ranges": [ + { + "type": "SEMVER", + "events": [ + { + "introduced": "0.9.0" + }, + { + "fixed": "0.9.20" + } + ] + } + ], + "versions": [] + } + ], + "references": [ + { + "type": "PACKAGE", + "url": "https://crates.io/crates/crossbeam-epoch" + }, + { + "type": "ADVISORY", + "url": "https://rustsec.org/advisories/RUSTSEC-2026-0204.html" + }, + { + "type": "WEB", + "url": "https://github.com/crossbeam-rs/crossbeam/pull/1276" + } + ], + "database_specific": { + "license": "CC0-1.0" + } +} \ No newline at end of file