{"action":"Upgrade rgb to 0.8.20 or later.","affected":[{"fixed":"0.8.20","introduced":"0.5.4"}],"component":"rgb","cve_ids":["CVE-2020-25016"],"ecosystem":"crates.io","epss":0.01595,"exploited":false,"fixed_versions":["0.8.20"],"ghsa_id":"GHSA-g4rw-8m5q-6453","id":"tcs_01M5KEXSPYDP53DCGN78C6D8N5","modified_at":"2023-11-08T04:03:09.114958Z","published_at":"2021-08-25T20:45:12Z","references":["https://osv.dev/vulnerability/GHSA-g4rw-8m5q-6453","https://nvd.nist.gov/vuln/detail/CVE-2020-25016","https://github.com/kornelski/rust-rgb/issues/35","https://github.com/kornelski/rust-rgb","https://rustsec.org/advisories/RUSTSEC-2020-0029.html"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-g4rw-8m5q-6453","url":"https://osv.dev/vulnerability/GHSA-g4rw-8m5q-6453"}],"summary":"Out of bounds access in rgb"}