{"action":"Upgrade crossbeam-utils to 0.8.7 or later.","affected":[{"fixed":"0.8.7","introduced":"0"}],"component":"crossbeam-utils","cve_ids":["CVE-2022-23639"],"ecosystem":"crates.io","epss":0.01229,"exploited":false,"fixed_versions":["0.8.7"],"ghsa_id":"GHSA-qc84-gqf4-9926","id":"tcs_01M5KF2HV9DHMQAYHJNKC0CRZG","modified_at":"2025-02-04T17:30:19Z","published_at":"2022-02-16T22:36:21Z","references":["https://osv.dev/vulnerability/GHSA-qc84-gqf4-9926","https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-qc84-gqf4-9926","https://nvd.nist.gov/vuln/detail/CVE-2022-23639","https://github.com/crossbeam-rs/crossbeam/pull/781","https://github.com/crossbeam-rs/crossbeam","https://github.com/crossbeam-rs/crossbeam/releases/tag/crossbeam-utils-0.8.7","https://rustsec.org/advisories/RUSTSEC-2022-0041.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-qc84-gqf4-9926","url":"https://osv.dev/vulnerability/GHSA-qc84-gqf4-9926"}],"summary":"crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64"}