{"action":"Upgrade smallvec to 0.6.13 or later.","affected":[{"fixed":"0.6.13","introduced":"0"}],"component":"smallvec","cve_ids":["CVE-2018-25023"],"ecosystem":"crates.io","epss":0.01423,"exploited":false,"fixed_versions":["0.6.13"],"ghsa_id":"GHSA-55m5-whcv-c49c","id":"tcs_01M5KESYN4B8Z3K2VF79KF3NA5","modified_at":"2023-11-08T04:00:14.788260Z","published_at":"2022-01-06T22:20:28Z","references":["https://osv.dev/vulnerability/GHSA-55m5-whcv-c49c","https://nvd.nist.gov/vuln/detail/CVE-2018-25023","https://github.com/servo/rust-smallvec/issues/126","https://github.com/servo/rust-smallvec/pull/162","https://github.com/servo/rust-smallvec/commit/e64afc8c473d43e375ab42bd33db2d0d4ac4e41b","https://github.com/servo/rust-smallvec","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/smallvec/RUSTSEC-2018-0018.md","https://rustsec.org/advisories/RUSTSEC-2018-0018.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-55m5-whcv-c49c","url":"https://osv.dev/vulnerability/GHSA-55m5-whcv-c49c"}],"summary":"Use of Uninitialized Resource in smallvec"}