{"action":"Upgrade tracing to 0.1.40 or later.","affected":[{"fixed":"0.1.40","introduced":"0.1.38"}],"component":"tracing","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.1.40"],"ghsa_id":"GHSA-8f24-6m29-wm2r","id":"tcs_01M5KEVRRVA6EKVWC067P2G2XW","modified_at":"2024-02-10T16:26:48.362242Z","published_at":"2024-01-17T20:32:35Z","references":["https://osv.dev/vulnerability/GHSA-8f24-6m29-wm2r","https://github.com/tokio-rs/tracing/pull/2765","https://github.com/tokio-rs/tracing/commit/20a1762b3fd5f1fafead198fd18e469c68683721","https://github.com/tokio-rs/tracing","https://github.com/tokio-rs/tracing/releases/tag/tracing-0.1.40","https://rustsec.org/advisories/RUSTSEC-2023-0078.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-8f24-6m29-wm2r","url":"https://osv.dev/vulnerability/GHSA-8f24-6m29-wm2r"}],"summary":"use-after-free in tracing"}