{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.0"}],"component":"wasm3","cve_ids":["CVE-2022-39974"],"ecosystem":"crates.io","epss":0.00907,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-crf8-h2wq-2h9x","id":"tcs_01M5KEX0MV693D235YXKQKMKEX","modified_at":"2024-10-15T16:56:01.296905Z","published_at":"2022-09-21T00:00:38Z","references":["https://osv.dev/vulnerability/GHSA-crf8-h2wq-2h9x","https://nvd.nist.gov/vuln/detail/CVE-2022-39974","https://github.com/wasm3/wasm3/issues/344","https://github.com/wasm3/wasm3/issues/379","https://github.com/pypa/advisory-database/tree/main/vulns/pywasm3/PYSEC-2022-43058.yaml","https://github.com/wasm3/wasm3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-crf8-h2wq-2h9x#crates.io/wasm3","url":"https://osv.dev/vulnerability/GHSA-crf8-h2wq-2h9x"}],"summary":"WASM3 Improper Input Validation vulnerability"}