{"action":"Upgrade mp3-metadata to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"mp3-metadata","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-927q-g9w9-pm54","id":"tcs_01M5KEW1ZQX14C4AV2QVWF2QCY","modified_at":"2025-10-28T06:29:23.888737Z","published_at":"2025-04-30T17:41:16Z","references":["https://osv.dev/vulnerability/GHSA-927q-g9w9-pm54","https://github.com/GuillaumeGomez/mp3-metadata/issues/36","https://github.com/GuillaumeGomez/mp3-metadata/pull/37","https://github.com/GuillaumeGomez/mp3-metadata","https://rustsec.org/advisories/RUSTSEC-2025-0027.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-927q-g9w9-pm54","url":"https://osv.dev/vulnerability/GHSA-927q-g9w9-pm54"}],"summary":"Panic in mp3-metadata due to the lack of bounds checking"}