{"action":"Upgrade rusty-paseto to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"rusty-paseto","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-j57r-4qw6-58r3","id":"tcs_01M5KF0W0DFDWHV03DWYXY1NBM","modified_at":"2023-11-07T23:44:25Z","published_at":"2023-11-07T23:44:25Z","references":["https://osv.dev/vulnerability/GHSA-j57r-4qw6-58r3","https://github.com/rrrodzilla/rusty_paseto/security/advisories/GHSA-j57r-4qw6-58r3","https://github.com/rrrodzilla/rusty_paseto/commit/42718c1b757c1dfabb80621f2f48b8268f7fa24e","https://github.com/rrrodzilla/rusty_paseto","https://github.com/rrrodzilla/rusty_paseto/releases/tag/v0.6.0","https://rustsec.org/advisories/RUSTSEC-2022-0093.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-j57r-4qw6-58r3","url":"https://osv.dev/vulnerability/GHSA-j57r-4qw6-58r3"}],"summary":"rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency"}