{"action":"Upgrade onenote_parser to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"onenote_parser","cve_ids":["CVE-2026-46671"],"ecosystem":"crates.io","epss":0.00152,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-4j5m-wc25-pvh7","id":"tcs_01M5KESN9V5M85QE4WP3PYNH8T","modified_at":"2026-05-21T21:56:33.880311Z","published_at":"2026-05-21T21:32:11Z","references":["https://osv.dev/vulnerability/GHSA-4j5m-wc25-pvh7","https://github.com/msiemens/onenote.rs/security/advisories/GHSA-4j5m-wc25-pvh7","https://github.com/msiemens/onenote.rs/commit/c9267b2c96e2542be7e7b557d67318e81b733585","https://github.com/msiemens/onenote.rs","https://github.com/msiemens/onenote.rs/blob/master/CHANGELOG.md#111---2026-05-15","https://github.com/msiemens/onenote.rs/releases/tag/v1.1.1"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-4j5m-wc25-pvh7","url":"https://osv.dev/vulnerability/GHSA-4j5m-wc25-pvh7"}],"summary":"Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory"}