{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.12.1"}],"component":"anymap","cve_ids":["CVE-2021-38187"],"ecosystem":"crates.io","epss":0.01441,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hc92-9h3m-c39j","id":"tcs_01M5KF0FMGM9WD2HEWGN4TVR20","modified_at":"2026-09-10T03:49:08.055825059Z","published_at":"2021-08-25T20:55:45Z","references":["https://osv.dev/vulnerability/GHSA-hc92-9h3m-c39j","https://nvd.nist.gov/vuln/detail/CVE-2021-38187","https://github.com/chris-morgan/anymap/issues/37","https://github.com/chris-morgan/anymap","https://rustsec.org/advisories/RUSTSEC-2021-0065.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hc92-9h3m-c39j","url":"https://osv.dev/vulnerability/GHSA-hc92-9h3m-c39j"}],"summary":"Incorrect cast in anymap"}