{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.6.1"}],"component":"arr","cve_ids":["CVE-2020-35886","CVE-2020-35887","CVE-2020-35888"],"ecosystem":"crates.io","epss":0.00194,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-c7fw-cr3w-wvfc","id":"tcs_01M5KEWREXHWBBX3JWATZ4WGCZ","modified_at":"2024-03-15T00:05:27.030752Z","published_at":"2021-08-25T20:49:04Z","references":["https://osv.dev/vulnerability/GHSA-c7fw-cr3w-wvfc","https://nvd.nist.gov/vuln/detail/CVE-2020-35886","https://github.com/sjep/array/issues/1","https://github.com/sjep/array","https://rustsec.org/advisories/RUSTSEC-2020-0034.html"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-c7fw-cr3w-wvfc","url":"https://osv.dev/vulnerability/GHSA-c7fw-cr3w-wvfc"}],"summary":"Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr"}