{"action":"Upgrade grin to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"grin","cve_ids":["CVE-2020-12439"],"ecosystem":"crates.io","epss":0.01551,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-6x52-88cq-55q5","id":"tcs_01M5KETX8F8VHR636RX3NHFD0J","modified_at":"2024-02-01T22:26:44.371487Z","published_at":"2022-05-24T17:17:13Z","references":["https://osv.dev/vulnerability/GHSA-6x52-88cq-55q5","https://nvd.nist.gov/vuln/detail/CVE-2020-12439","https://github.com/mimblewimble/grin/issues/3235","https://github.com/mimblewimble/grin/pull/3236","https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-12439.md"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-6x52-88cq-55q5","url":"https://osv.dev/vulnerability/GHSA-6x52-88cq-55q5"}],"summary":"Grin allows attackers to adversely affect availability of data on a Mimblewimble blockchain"}