Skip to content

Commit 810465e

Browse files
committed
fix(wasm-utxo): pin crossbeam-epoch to >=0.9.20
Fixes RUSTSEC-2026-0204 — invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid.
1 parent 5b5297d commit 810465e

2 files changed

Lines changed: 6 additions & 2 deletions

File tree

packages/wasm-utxo/Cargo.lock

Lines changed: 3 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

packages/wasm-utxo/Cargo.toml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,9 @@ serde = { version = "1.0", features = ["derive"], optional = true }
3838
serde_json = { version = "1.0", optional = true }
3939
hex = { version = "0.4", optional = true }
4040

41+
# Pinned to avoid RUSTSEC-2026-0204 (invalid pointer dereference in fmt::Pointer)
42+
crossbeam-epoch = ">=0.9.20"
43+
4144
[dev-dependencies]
4245
base64 = "0.22.1"
4346
serde = { version = "1.0", features = ["derive"] }

0 commit comments

Comments
 (0)