{"action":"Upgrade buffered-reader to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0"},{"fixed":"1.1.5","introduced":"1.1.0"}],"component":"buffered-reader","cve_ids":["CVE-2023-53161"],"ecosystem":"crates.io","epss":0.00393,"exploited":false,"fixed_versions":["1.0.2","1.1.5"],"ghsa_id":"GHSA-29mf-62xx-28jq","id":"tcs_01M5KER3YRP16HNEBQ1T13TP83","modified_at":"2025-07-28T16:42:10.913519Z","published_at":"2023-06-06T01:58:41Z","references":["https://osv.dev/vulnerability/GHSA-29mf-62xx-28jq","https://nvd.nist.gov/vuln/detail/CVE-2023-53161","https://github.com/advisories/GHSA-25mx-8f3v-8wh7","https://gitlab.com/sequoia-pgp/sequoia","https://gitlab.com/sequoia-pgp/sequoia/-/blob/main/buffered-reader/NEWS","https://gitlab.com/sequoia-pgp/sequoia/-/tags/buffered-reader%2Fv1.0.2","https://gitlab.com/sequoia-pgp/sequoia/-/tags/buffered-reader%2Fv1.1.5","https://lists.sequoia-pgp.org/hyperkitty/list/announce@lists.sequoia-pgp.org/thread/SN2E3QRT4DMQ5JNEK6VIN6DJ5SH766DI","https://rustsec.org/advisories/RUSTSEC-2023-0039.html"],"severity":{"label":"low","score":2.9},"sources":[{"source":"osv","source_id":"GHSA-29mf-62xx-28jq","url":"https://osv.dev/vulnerability/GHSA-29mf-62xx-28jq"}],"summary":"buffered-reader vulnerable to out-of-bounds array access leading to panic"}