{"action":"Upgrade totp-rs to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"totp-rs","cve_ids":["CVE-2022-29185"],"ecosystem":"crates.io","epss":0.00863,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-8vxv-2g8p-2249","id":"tcs_01M5KEW12XN62DAKN7C07NAEF3","modified_at":"2023-11-08T04:09:09.176539Z","published_at":"2022-05-24T21:33:15Z","references":["https://osv.dev/vulnerability/GHSA-8vxv-2g8p-2249","https://github.com/constantoine/totp-rs/security/advisories/GHSA-8vxv-2g8p-2249","https://nvd.nist.gov/vuln/detail/CVE-2022-29185","https://github.com/constantoine/totp-rs/issues/13","https://github.com/constantoine/totp-rs/commit/1f1e1a6fe722deb1656f483b1367ea4be978db5b","https://github.com/constantoine/totp-rs","https://github.com/constantoine/totp-rs/compare/v1.0...v1.1.0","https://github.com/constantoine/totp-rs/releases/tag/v1.1.0","https://rustsec.org/advisories/RUSTSEC-2022-0018.html"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-8vxv-2g8p-2249","url":"https://osv.dev/vulnerability/GHSA-8vxv-2g8p-2249"}],"summary":"Observable Timing Discrepancy in totp-rs"}