anchor-lang vulnerabilities
CVEs whose affected-version data names the anchor-lang package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
RUSTSEC-2026-0146None`InterfaceAccount` allows account substitution between unexpected types
`InterfaceAccount` allows account substitution between unexpected types
▾ Sunlitanchor-lang · anchor-langvia OSV
CVE-2026-45137High· 8.2`Program<System>` accepts arbitrary executable programs
`Program<System>` accepts arbitrary executable programs
▾ Twilightanchor-lang · anchor-langEPSS 0.38%via OSV