{"action":"Upgrade crossbeam-channel to 0.4.4 or later.","affected":[{"fixed":"0.4.4","introduced":"0.4.3"}],"component":"crossbeam-channel","cve_ids":["CVE-2020-15254","CVE-2020-35904"],"ecosystem":"crates.io","epss":0.02701,"exploited":false,"fixed_versions":["0.4.4"],"ghsa_id":"GHSA-m8h8-v6jh-c762","id":"tcs_01M5KF1JVHJ4J1JCZK6VJV020Z","modified_at":"2023-11-08T04:02:35.713139Z","published_at":"2021-08-25T20:49:43Z","references":["https://osv.dev/vulnerability/GHSA-m8h8-v6jh-c762","https://nvd.nist.gov/vuln/detail/CVE-2020-35904","https://github.com/crossbeam-rs/crossbeam/pull/533","https://github.com/crossbeam-rs/crossbeam","https://rustsec.org/advisories/RUSTSEC-2020-0052.html"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-m8h8-v6jh-c762","url":"https://osv.dev/vulnerability/GHSA-m8h8-v6jh-c762"}],"summary":"Incorrect buffer size in crossbeam-channel"}