{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.1"}],"component":"messagepack-rs","cve_ids":["CVE-2021-45690","CVE-2021-45691","CVE-2021-45692","CVE-2021-45693"],"ecosystem":"crates.io","epss":0.0123,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jwfh-j623-m97h","id":"tcs_01M5KF1AS0K3RRY0BNEDFS4HAB","modified_at":"2024-03-15T00:05:17.689306Z","published_at":"2022-01-06T22:12:35Z","references":["https://osv.dev/vulnerability/GHSA-jwfh-j623-m97h","https://nvd.nist.gov/vuln/detail/CVE-2021-45691","https://github.com/otake84/messagepack-rs/issues/2","https://github.com/otake84/messagepack-rs","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md","https://rustsec.org/advisories/RUSTSEC-2021-0092.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-jwfh-j623-m97h","url":"https://osv.dev/vulnerability/GHSA-jwfh-j623-m97h"}],"summary":"Use of Uninitialized Resource in messagepack-rs"}