From 057b0a0e7aa02c7e0a2caf5795f7d6d81b4d6eb6 Mon Sep 17 00:00:00 2001 From: Mistral Vibe Date: Sat, 12 Sep 2026 19:24:34 +0100 Subject: [PATCH] fix(security): upgrade crossbeam-epoch from 0.9.18 to 0.9.20 Resolves RUSTSEC-2026-0204: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid. This addresses the security vulnerability detected by cargo audit. Fixes: https://github.com/hyperpolymath/filesoup/issues/89 --- Cargo.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 9cce3a9..709b058 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -405,9 +405,9 @@ dependencies = [ [[package]] name = "crossbeam-epoch" -version = "0.9.18" +version = "0.9.20" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e" +checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f" dependencies = [ "crossbeam-utils", ]