HIGH crates.io
GHSA-429q-fhh4-r6hj · RUSTSEC-2026-0146 Anchor: `InterfaceAccount` allows account substitution between unexpected types
Modified: 5/19/2026
package
crates.io / anchor-lang
pkg:crates.io/anchor-lang
HIGH 8.2 crates.io
GHSA-c6rc-8jpp-2fgc · CVE-2026-45137, RUSTSEC-2026-0144 Anchor: Program<'info, System> is not properly validated
Modified: 6/9/2026
HIGH 8.2 crates.io
RUSTSEC-2026-0144 · CVE-2026-45137, GHSA-c6rc-8jpp-2fgc `Program<System>` accepts arbitrary executable programs
Modified: 5/18/2026
— crates.io
RUSTSEC-2026-0146 · GHSA-429q-fhh4-r6hj `InterfaceAccount` allows account substitution between unexpected types
Modified: 5/19/2026