{"action":"Upgrade tokio-boring to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"4.0.0"}],"component":"tokio-boring","cve_ids":["CVE-2023-6180"],"ecosystem":"crates.io","epss":0.00619,"exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-pjrj-h4fg-6gm4","id":"tcs_01M5KF24KX2BSEQVSAV9JATA3Q","modified_at":"2026-07-08T06:29:08.895269677Z","published_at":"2023-12-05T23:42:49Z","references":["https://osv.dev/vulnerability/GHSA-pjrj-h4fg-6gm4","https://github.com/cloudflare/boring/security/advisories/GHSA-pjrj-h4fg-6gm4","https://nvd.nist.gov/vuln/detail/CVE-2023-6180","https://github.com/cloudflare/boring/commit/a32783374f2682e6949fdb713910b1b9f103d3ed","https://github.com/cloudflare/boring"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-pjrj-h4fg-6gm4","url":"https://osv.dev/vulnerability/GHSA-pjrj-h4fg-6gm4"}],"summary":"tokio-boring vulnerable to resource exhaustion via memory leak"}