{"action":"Upgrade bitvec to 0.17.4 or later.","affected":[{"fixed":"0.17.4","introduced":"0.11.0"}],"component":"bitvec","cve_ids":["CVE-2020-35862"],"ecosystem":"crates.io","epss":0.01649,"exploited":false,"fixed_versions":["0.17.4"],"ghsa_id":"GHSA-7cjc-hvxf-gqh7","id":"tcs_01M5KEV6ZY1NZ9JAVYNTZCZVNP","modified_at":"2023-11-08T04:03:36.155899Z","published_at":"2021-08-25T20:47:39Z","references":["https://osv.dev/vulnerability/GHSA-7cjc-hvxf-gqh7","https://nvd.nist.gov/vuln/detail/CVE-2020-35862","https://github.com/myrrlyn/bitvec/issues/55","https://github.com/myrrlyn/bitvec","https://rustsec.org/advisories/RUSTSEC-2020-0007.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7cjc-hvxf-gqh7","url":"https://osv.dev/vulnerability/GHSA-7cjc-hvxf-gqh7"}],"summary":"Use after free and double free in bitvec"}