{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.2"}],"component":"rdiff","cve_ids":["CVE-2021-45694"],"ecosystem":"crates.io","epss":0.01095,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q579-9wp9-gfp2","id":"tcs_01M5KF2D2JRYCJADNDY50C6ETQ","modified_at":"2023-11-08T04:07:22.314410Z","published_at":"2022-06-17T00:14:18Z","references":["https://osv.dev/vulnerability/GHSA-q579-9wp9-gfp2","https://github.com/dyule/rdiff/issues/3","https://github.com/dyule/rdiff","https://rustsec.org/advisories/RUSTSEC-2021-0094.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-q579-9wp9-gfp2","url":"https://osv.dev/vulnerability/GHSA-q579-9wp9-gfp2"}],"summary":"Window can read out of bounds if Read instance returns more bytes than buffer size"}