anchor-lang vulnerabilities (crates.io)

2 vulnerabilities.

• anchor-lang crates.io Anchor: `InterfaceAccount` allows account substitution between unexpected types GHSA-429q-fhh4-r6hj Fix available 8.7 HighMay 8, 2026
• anchor-lang crates.io Anchor: Program<'info, System> is not properly validated CVE-2026-45137 Fix available 8.2 HighMay 7, 2026