{"action":"Upgrade iana-time-zone to 0.1.45 or later.","affected":[{"fixed":"0.1.45","introduced":"0.1.43"}],"component":"iana-time-zone","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.1.45"],"ghsa_id":"GHSA-3fg9-hcq5-vxrc","id":"tcs_01M5KERXHNW66DE8QJ08S8BJQG","modified_at":"2023-11-08T04:14:35.913675Z","published_at":"2022-08-30T19:55:41Z","references":["https://osv.dev/vulnerability/GHSA-3fg9-hcq5-vxrc","https://github.com/strawlab/iana-time-zone/pull/54","https://github.com/strawlab/iana-time-zone","https://rustsec.org/advisories/RUSTSEC-2022-0049.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-3fg9-hcq5-vxrc","url":"https://osv.dev/vulnerability/GHSA-3fg9-hcq5-vxrc"}],"summary":"iana-time-zone vulnerable to use after free in MacOS / iOS implementation"}