{"id":"EUVD-2026-28834","enisaUuid":"36423614-256d-3f13-a248-ca887ef6f766","description":"Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get() may invoke get_unchecked() with an invalid index, resulting in Undefined Behavior. This issue has been patched in version 1.0.1.","datePublished":"May 8, 2026, 9:15:16 PM","dateUpdated":"May 11, 2026, 4:00:21 PM","baseScore":6.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp\nhttps://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072\nhttps://github.com/becheran/grid/releases/tag/v1.0.1\n","aliases":"CVE-2026-42199\n","assigner":"GitHub_M","epss":0.2,"enisaIdProduct":[{"id":"bd1b3ff9-da13-37f5-ab93-0a4021611e1a","product":{"name":"Grid","vendor":{"name":"becheran"}},"product_version":"0.17.0, \u003c 1.0.1"}],"enisaIdVendor":[{"id":"50d316b9-686c-3a10-b469-bd610c4b64bb","vendor":{"name":"becheran"}}],"enisaIdVulnerability":[{"id":"4bc01f41-1e5b-3a86-aa5a-dcc688cc3178","vulnerability":{"id":"CVE-2026-42199","description":"Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expand_rows() can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get() may invoke get_unchecked() with an invalid index, resulting in Undefined Behavior. This issue has been patched in version 1.0.1.","datePublished":"May 8, 2026, 9:15:16 PM","dateUpdated":"May 11, 2026, 4:00:21 PM","status":"PUBLISHED","baseScore":6.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/becheran/grid/security/advisories/GHSA-38c5-483c-4qqp\nhttps://github.com/becheran/grid/commit/be213bd3528727148bef2d523c89e95d1fd9c072\nhttps://github.com/becheran/grid/releases/tag/v1.0.1\n","enisa_id":"EUVD-2026-28834\n","assigner":"GitHub_M","epss":0.2,"dataProcessed":"Nov 7, 2026, 7:21:17 AM","vulnerabilityProduct":[{"id":"b7191ee7-dba7-3516-bbba-3d96d53d5410","product":{"name":"Grid","vendor":{"name":"becheran"}},"product_version":"0.17.0, \u003c 1.0.1"}],"vulnerabilityVendor":[{"id":"43be7dd3-a2d6-3a20-aa94-47180ddd2c31","vendor":{"name":"becheran"}}]}}],"enisaIdAdvisory":[]}