{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.1"}],"component":"messagepack-rs","cve_ids":["CVE-2021-45690","CVE-2021-45691","CVE-2021-45692","CVE-2021-45693"],"ecosystem":"crates.io","epss":0.0123,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jqjj-r4qp-x2gh","id":"tcs_01M5KF167MN5MPTXB13KRPS73J","modified_at":"2024-03-15T00:05:17.689306Z","published_at":"2022-01-06T22:12:42Z","references":["https://osv.dev/vulnerability/GHSA-jqjj-r4qp-x2gh","https://nvd.nist.gov/vuln/detail/CVE-2021-45693","https://github.com/otake84/messagepack-rs/issues/2","https://github.com/otake84/messagepack-rs","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md","https://rustsec.org/advisories/RUSTSEC-2021-0092.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jqjj-r4qp-x2gh","url":"https://osv.dev/vulnerability/GHSA-jqjj-r4qp-x2gh"}],"summary":"Use of Uninitialized Resource in messagepack-rs."}