{"action":"Upgrade libsecp256k1 to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"libsecp256k1","cve_ids":["CVE-2021-38195"],"ecosystem":"crates.io","epss":0.00909,"exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-g4vj-x7v9-h82m","id":"tcs_01M5KEXT4K6Z6Q3VT0MC6XRS33","modified_at":"2023-11-08T04:06:26.227511Z","published_at":"2021-08-25T20:56:03Z","references":["https://osv.dev/vulnerability/GHSA-g4vj-x7v9-h82m","https://nvd.nist.gov/vuln/detail/CVE-2021-38195","https://github.com/paritytech/libsecp256k1/pull/67","https://github.com/paritytech/libsecp256k1","https://rustsec.org/advisories/RUSTSEC-2021-0076.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g4vj-x7v9-h82m","url":"https://osv.dev/vulnerability/GHSA-g4vj-x7v9-h82m"}],"summary":"Overflow in libsecp256k1"}