{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.8.1"}],"component":"messagepack-rs","cve_ids":["CVE-2021-45690","CVE-2021-45691","CVE-2021-45692","CVE-2021-45693"],"ecosystem":"crates.io","epss":0.0123,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m325-rxjv-pwph","id":"tcs_01M5KF1CRFCMQFPR4N8HWC7EVA","modified_at":"2024-03-15T00:05:17.689306Z","published_at":"2022-06-17T00:11:41Z","references":["https://osv.dev/vulnerability/GHSA-m325-rxjv-pwph","https://github.com/otake84/messagepack-rs/issues/2","https://github.com/otake84/messagepack-rs","https://rustsec.org/advisories/RUSTSEC-2021-0092.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-m325-rxjv-pwph","url":"https://osv.dev/vulnerability/GHSA-m325-rxjv-pwph"}],"summary":"Deserialization functions pass uninitialized memory to user-provided Read"}