{"action":"Upgrade abox to 0.4.1 or later.","affected":[{"fixed":"0.4.1","introduced":"0"}],"component":"abox","cve_ids":["CVE-2020-36441"],"ecosystem":"crates.io","epss":0.00766,"exploited":false,"fixed_versions":["0.4.1"],"ghsa_id":"GHSA-r626-fc64-3q28","id":"tcs_01M5KF2Y57J0MQE7F6F4WX2C25","modified_at":"2023-11-08T04:03:45.024840Z","published_at":"2021-08-25T20:59:06Z","references":["https://osv.dev/vulnerability/GHSA-r626-fc64-3q28","https://nvd.nist.gov/vuln/detail/CVE-2020-36441","https://github.com/SonicFrog/abox/issues/1","https://github.com/SonicFrog/abox/pull/2","https://github.com/SonicFrog/abox/commit/34c2b9e","https://github.com/SonicFrog/abox","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/abox/RUSTSEC-2020-0121.md","https://rustsec.org/advisories/RUSTSEC-2020-0121.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-r626-fc64-3q28","url":"https://osv.dev/vulnerability/GHSA-r626-fc64-3q28"}],"summary":"Data race in abox"}