error[vulnerability]: Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid
┌─ /home/oriol/src/stylo/Cargo.lock:10:1
│
10 │ crossbeam-epoch 0.9.18 registry+https://github.com/rust-lang/crates.io-index
│ ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ security vulnerability detected
│
├ ID: RUSTSEC-2026-0204
├ Advisory: https://rustsec.org/advisories/RUSTSEC-2026-0204
├ Affected versions of `fmt::Display` dereference the underlying pointer. This causes a invalid pointer dereference e.g., when a pointer created with `Atomic::null` or `Shared::null`. `fmt::Debug` impls and pre-0.9 `fmt::Display` impls, which do not dereference pointers, are not affected by this issue.
├ Announcement: https://github.com/crossbeam-rs/crossbeam/pull/1276
├ Solution: Upgrade to >=0.9.20 (try `cargo update -p crossbeam-epoch`)
├ crossbeam-epoch v0.9.18
└── crossbeam-deque v0.8.5
└── rayon-core v1.12.1
├── rayon v1.10.0
│ └── stylo v0.19.0
└── stylo v0.19.0 (*)
https://rustsec.org/advisories/RUSTSEC-2026-0204