VULNRABLE / Vulnerability / CVE-2026-55406

CVE-2026-55406

MEDIUM LOW buffa GHSA

Exploit verdict: No active-exploit signal

CVSS Score
5.5
Severity
MEDIUM
EPSS
0%
Source
GHSA

Summary

Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref

What this means

CVE-2026-55406 is a medium-severity vulnerability affecting buffa, rated CVSS 5.5. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published August 29, 2026.

View full advisory at GHSA →