EUVD-2026-44949

Buffa has a Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref...

PT-2026-60502

Buffa is a pure-Rust Protocol Buffers implementation with first-class protobuf editions support. Prior to 0.7.0, a soundness bug in the OwnedView type allowed safe Rust code to trigger a use-after-free: the OwnedView::decode constructor transmuted a borrowed slice to &'static u8, and the Deref...