{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.6.1"}],"component":"arr","cve_ids":["CVE-2020-35886","CVE-2020-35887","CVE-2020-35888"],"ecosystem":"crates.io","epss":0.00194,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fhvj-7f9p-w788","id":"tcs_01M5KEXFKPSR7FNRWHR4ABVZRH","modified_at":"2024-03-15T00:05:27.030752Z","published_at":"2021-08-25T20:48:54Z","references":["https://osv.dev/vulnerability/GHSA-fhvj-7f9p-w788","https://nvd.nist.gov/vuln/detail/CVE-2020-35887","https://github.com/sjep/array/issues/1","https://github.com/sjep/array","https://rustsec.org/advisories/RUSTSEC-2020-0034.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fhvj-7f9p-w788","url":"https://osv.dev/vulnerability/GHSA-fhvj-7f9p-w788"}],"summary":"Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr"}