{"action":"Upgrade tokio-rustls to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0.12.0"},{"fixed":"0.13.1","introduced":"0.13.0"}],"component":"tokio-rustls","cve_ids":["CVE-2020-35875"],"ecosystem":"crates.io","epss":0.01352,"exploited":false,"fixed_versions":["0.12.3","0.13.1"],"ghsa_id":"GHSA-2jfv-g3fh-xq3v","id":"tcs_01M5KERDXPAY7D7Y4MXMMVEPCC","modified_at":"2023-11-08T04:03:36.949759Z","published_at":"2021-08-25T20:46:54Z","references":["https://osv.dev/vulnerability/GHSA-2jfv-g3fh-xq3v","https://nvd.nist.gov/vuln/detail/CVE-2020-35875","https://github.com/tokio-rs/tls/pull/14","https://github.com/tokio-rs/tls","https://rustsec.org/advisories/RUSTSEC-2020-0019.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2jfv-g3fh-xq3v","url":"https://osv.dev/vulnerability/GHSA-2jfv-g3fh-xq3v"}],"summary":"Excessive memory usage in tokio-rustls"}