cve.nowby Sazabi

crates.ioPackage

fory-core

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release: 1.7.7 (Oct 12, 2026): no advisory affects it
Newest unaffected release: 1.7.7 (Oct 12, 2026), the latest release
Advisories: 1 · 1 high

Weekly downloads: 1,758
Dependents: 5
Releases: 55 since 0.1.0 (Oct 9, 2025)
Registry: crates.io
Releases read: Nov 8, 2026

Version timeline

CVE-2026-60080
Affects 0.13.0 to 1.3.0 (1.4.0-rc.1 is outside it)

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

CVE-2026-60080High 7.3
Apache Fory: Rust MetaString heap use-after-free
Affected: from 0.13.0, through 1.3.0.
Fixed in 1.4.0 (released Jul 20, 2026, 1 day before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 1.7.7, is not affected.