{"action":"Upgrade phonenumber to 0.3.6 or later.","affected":[{"fixed":"0.3.6","introduced":"0.3.4"}],"component":"phonenumber","cve_ids":["CVE-2024-39697"],"ecosystem":"crates.io","epss":0.00711,"exploited":false,"fixed_versions":["0.3.6"],"ghsa_id":"GHSA-mjw4-jj88-v687","id":"tcs_01M5KF1RJ04Z25H99N3NA8KAYG","modified_at":"2026-09-10T03:49:18.738608398Z","published_at":"2024-07-09T14:13:48Z","references":["https://osv.dev/vulnerability/GHSA-mjw4-jj88-v687","https://github.com/whisperfish/rust-phonenumber/security/advisories/GHSA-mjw4-jj88-v687","https://nvd.nist.gov/vuln/detail/CVE-2024-39697","https://github.com/whisperfish/rust-phonenumber/issues/69","https://github.com/whisperfish/rust-phonenumber/pull/52","https://github.com/whisperfish/rust-phonenumber/commit/b792151b17fc90231c232a23935830c2266f3203","https://github.com/whisperfish/rust-phonenumber/commit/f69abee1481fac0d6d531407bae90020e39c6407","https://github.com/whisperfish/rust-phonenumber","https://rustsec.org/advisories/RUSTSEC-2024-0369.html"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-mjw4-jj88-v687","url":"https://osv.dev/vulnerability/GHSA-mjw4-jj88-v687"}],"summary":"panic on parsing crafted phonenumber inputs"}