{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"rustdecimal","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7pwq-f4pq-78gm","id":"tcs_01M5KEVBN1ZV3D3KB19A831KZT","modified_at":"2023-11-08T04:16:56.871426Z","published_at":"2022-08-11T15:43:35Z","references":["https://osv.dev/vulnerability/GHSA-7pwq-f4pq-78gm","https://github.com/paupino/rust-decimal/issues/514#issuecomment-1115408888","https://groups.google.com/g/rustlang-security-announcements/c/5DVtC8pgJLw?pli=1","https://raw.globalsecuritydatabase.org/GSD-2022-1002520","https://rustsec.org/advisories/RUSTSEC-2022-0042.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-7pwq-f4pq-78gm","url":"https://osv.dev/vulnerability/GHSA-7pwq-f4pq-78gm"}],"summary":"`rustdecimal` is a malicious crate"}