{"action":"Upgrade tokio to 1.5.1 or later.","affected":[{"fixed":"1.8.1","introduced":"1.8.0"},{"fixed":"1.7.2","introduced":"1.7.0"},{"fixed":"1.6.3","introduced":"1.6.0"},{"fixed":"1.5.1","introduced":"0.3.0"}],"component":"tokio","cve_ids":["CVE-2021-38191"],"ecosystem":"crates.io","epss":0.00833,"exploited":false,"fixed_versions":["1.8.1","1.7.2","1.6.3","1.5.1"],"ghsa_id":"GHSA-2grh-hm3w-w7hv","id":"tcs_01M5KERCRAMXQWQB60JKPV521C","modified_at":"2023-11-08T04:06:25.982475Z","published_at":"2021-08-25T20:55:51Z","references":["https://osv.dev/vulnerability/GHSA-2grh-hm3w-w7hv","https://nvd.nist.gov/vuln/detail/CVE-2021-38191","https://github.com/tokio-rs/tokio/issues/3929","https://github.com/tokio-rs/tokio","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0072.md","https://rustsec.org/advisories/RUSTSEC-2021-0072.html"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-2grh-hm3w-w7hv","url":"https://osv.dev/vulnerability/GHSA-2grh-hm3w-w7hv"}],"summary":"Race condition in tokio"}