{"action":"Upgrade grin to 4.0.0 or later.","affected":[{"fixed":"4.0.0","introduced":"3.0.0"}],"component":"grin","cve_ids":["CVE-2020-15899"],"ecosystem":"crates.io","epss":0.00754,"exploited":false,"fixed_versions":["4.0.0"],"ghsa_id":"GHSA-p75g-gcv5-42qg","id":"tcs_01M5KF1ZVSA5TYPXGY7CRD3SEH","modified_at":"2024-02-01T22:13:58.789564Z","published_at":"2022-05-24T17:24:33Z","references":["https://osv.dev/vulnerability/GHSA-p75g-gcv5-42qg","https://nvd.nist.gov/vuln/detail/CVE-2020-15899","https://github.com/mimblewimble/grin-security/blob/master/CVEs/CVE-2020-15899.md","https://github.com/mimblewimble/grin/compare/v3.1.1...v4.0.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p75g-gcv5-42qg","url":"https://osv.dev/vulnerability/GHSA-p75g-gcv5-42qg"}],"summary":"Grin insufficient data validation"}