buffa vulnerabilities (crates.io)

2 vulnerabilities.

• buffa crates.io Buffa: Memory Exhaustion Denial of Service in decode_unknown_field via Unbounded Allocation CVE-2026-55407 Fix available 6.3 MediumJuly 16, 2026
• buffa crates.io Buffa: Use-After-Free in OwnedView via Unsound 'static Lifetime Promotion in Deref CVE-2026-55406 Fix available 5.9 MediumJuly 16, 2026