{"action":"Upgrade axum-core to 0.2.8 or later.","affected":[{"fixed":"0.2.8","introduced":"0"},{"fixed":"0.3.0-rc.2","introduced":"0.3.0-rc.1"}],"component":"axum-core","cve_ids":["CVE-2022-3212"],"ecosystem":"crates.io","epss":0.01002,"exploited":false,"fixed_versions":["0.2.8","0.3.0-rc.2"],"ghsa_id":"GHSA-m77f-652q-wwp4","id":"tcs_01M5KF1HFFPJZ8H3VSH3XTW3KN","modified_at":"2023-11-08T04:09:34.414125Z","published_at":"2022-09-15T03:25:15Z","references":["https://osv.dev/vulnerability/GHSA-m77f-652q-wwp4","https://nvd.nist.gov/vuln/detail/CVE-2022-3212","https://github.com/tokio-rs/axum/pull/1346","https://github.com/tokio-rs/axum","https://rustsec.org/advisories/RUSTSEC-2022-0055.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m77f-652q-wwp4","url":"https://osv.dev/vulnerability/GHSA-m77f-652q-wwp4"}],"summary":"axum-core has no default limit put on request bodies"}