CVE-2026-77651

Name of the Vulnerable Software and Affected Versions arrayref version 0.3.10

Description This issue is a supply chain compromise where the crate can trigger the execution of malicious code during the compilation of a project. This occurs because the crate includes a rogue dependency that registers with a command-and-control server to enable arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.