{"action":"Upgrade miow to 0.3.6 or later.","affected":[{"fixed":"0.3.6","introduced":"0.3.0"}],"component":"miow","cve_ids":["CVE-2020-35921"],"ecosystem":"crates.io","epss":0.00395,"exploited":false,"fixed_versions":["0.3.6"],"ghsa_id":"GHSA-jrcf-4jp8-m28v","id":"tcs_01M5KF182HKJPB78WTJTKE4J48","modified_at":"2023-11-08T04:03:39.469693Z","published_at":"2021-08-25T20:50:35Z","references":["https://osv.dev/vulnerability/GHSA-jrcf-4jp8-m28v","https://nvd.nist.gov/vuln/detail/CVE-2020-35921","https://github.com/yoshuawuyts/miow/issues/38","https://github.com/yoshuawuyts/miow/pull/39","https://github.com/yoshuawuyts/miow/pull/40","https://github.com/yoshuawuyts/miow","https://rustsec.org/advisories/RUSTSEC-2020-0080.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-jrcf-4jp8-m28v","url":"https://osv.dev/vulnerability/GHSA-jrcf-4jp8-m28v"}],"summary":"miow invalidly assumes the memory layout of std::net::SocketAddr"}