{"action":"Upgrade oqs to 0.7.2 or later.","affected":[{"fixed":"0.7.2","introduced":"0"}],"component":"oqs","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.7.2"],"ghsa_id":"GHSA-hrjv-pf36-jpmr","id":"tcs_01M5KF0PN9BHHVERRZEFJ45N9A","modified_at":"2023-11-08T04:20:13.312979Z","published_at":"2022-08-18T19:01:15Z","references":["https://osv.dev/vulnerability/GHSA-hrjv-pf36-jpmr","https://github.com/open-quantum-safe/liboqs-rust/pull/151","https://github.com/open-quantum-safe/liboqs-rust","https://rustsec.org/advisories/RUSTSEC-2022-0045.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hrjv-pf36-jpmr","url":"https://osv.dev/vulnerability/GHSA-hrjv-pf36-jpmr"}],"summary":"oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken"}