{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.2.0","last_affected":"0.2.3"}],"component":"mail-internals","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rcx8-48pc-v9q8","id":"tcs_01M5KF31MPMPB9KCWBDF71T4Q8","modified_at":"2023-11-08T04:22:42.487180Z","published_at":"2023-08-24T22:20:47Z","references":["https://osv.dev/vulnerability/GHSA-rcx8-48pc-v9q8","https://github.com/rustsec/advisory-db/blob/main/crates/mail-internals/RUSTSEC-2023-0054.md","https://rustsec.org/advisories/RUSTSEC-2023-0054.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-rcx8-48pc-v9q8","url":"https://osv.dev/vulnerability/GHSA-rcx8-48pc-v9q8"}],"summary":"mail-internals use-after-free vulnerability in `vec_insert_bytes`"}