{"action":"Upgrade rusqlite to 0.25.4 or later.","affected":[{"fixed":"0.26.2","introduced":"0.26.0"},{"fixed":"0.25.4","introduced":"0.25.0"}],"component":"rusqlite","cve_ids":["CVE-2021-45713","CVE-2021-45714","CVE-2021-45715","CVE-2021-45716","CVE-2021-45717","CVE-2021-45718","CVE-2021-45719"],"ecosystem":"crates.io","epss":0.01219,"exploited":false,"fixed_versions":["0.26.2","0.25.4"],"ghsa_id":"GHSA-q89g-4vhh-mvvm","id":"tcs_01M5KF2EXGQCYKV4Z8Q05YGAJW","modified_at":"2024-03-15T00:05:18.748750Z","published_at":"2022-06-17T00:16:48Z","references":["https://osv.dev/vulnerability/GHSA-q89g-4vhh-mvvm","https://github.com/rusqlite/rusqlite/issues/1048","https://github.com/rusqlite/rusqlite","https://rustsec.org/advisories/RUSTSEC-2021-0128.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-q89g-4vhh-mvvm","url":"https://osv.dev/vulnerability/GHSA-q89g-4vhh-mvvm"}],"summary":"Incorrect Lifetime Bounds on Closures in `rusqlite`"}