{"action":"Upgrade smallvec to 0.6.13 or later.","affected":[{"fixed":"0.6.13","introduced":"0"}],"component":"smallvec","cve_ids":["CVE-2018-25023"],"ecosystem":"crates.io","epss":0.01423,"exploited":false,"fixed_versions":["0.6.13"],"ghsa_id":"GHSA-66p5-j55p-32r9","id":"tcs_01M5KETH6ETS9PY3PHJF1VK3RF","modified_at":"2023-11-08T04:00:14.788260Z","published_at":"2021-08-25T21:00:25Z","references":["https://osv.dev/vulnerability/GHSA-66p5-j55p-32r9","https://github.com/servo/rust-smallvec/issues/126","https://github.com/servo/rust-smallvec/pull/162","https://github.com/servo/rust-smallvec","https://rustsec.org/advisories/RUSTSEC-2018-0018.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-66p5-j55p-32r9","url":"https://osv.dev/vulnerability/GHSA-66p5-j55p-32r9"}],"summary":"smallvec creates uninitialized value of any type"}