{"action":"Upgrade miniscript to 9.2.0 or later.","affected":[{"fixed":"12.2.0","introduced":"12.0.0"},{"fixed":"11.2.0","introduced":"11.0.0"},{"fixed":"10.2.0","introduced":"10.0.0"},{"fixed":"9.2.0","introduced":"0"}],"component":"miniscript","cve_ids":["CVE-2024-44073"],"ecosystem":"crates.io","epss":0.00633,"exploited":false,"fixed_versions":["12.2.0","11.2.0","10.2.0","9.2.0"],"ghsa_id":"GHSA-rv9v-r4vm-gj8x","id":"tcs_01M5KF37Q8JHTF7CRG05BTBSS8","modified_at":"2024-09-09T18:20:53Z","published_at":"2024-08-19T03:30:48Z","references":["https://osv.dev/vulnerability/GHSA-rv9v-r4vm-gj8x","https://nvd.nist.gov/vuln/detail/CVE-2024-44073","https://github.com/rust-bitcoin/rust-miniscript/pull/704","https://github.com/rust-bitcoin/rust-miniscript/pull/712","https://github.com/rust-bitcoin/rust-miniscript/pull/712/files","https://github.com/rust-bitcoin/rust-miniscript/pull/713/files","https://github.com/rust-bitcoin/rust-miniscript/pull/714/files","https://github.com/rust-bitcoin/rust-miniscript/pull/715/files","https://github.com/rust-bitcoin/rust-miniscript/commit/5b0f5e3417f027a22b066debf825dbe6644b575b","https://github.com/rust-bitcoin/rust-miniscript/commit/8f54b5e3fb7129ed9fbed53f1cb9e6e62ea4c151","https://github.com/rust-bitcoin/rust-miniscript/compare/11.2.0...12.2.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rv9v-r4vm-gj8x","url":"https://osv.dev/vulnerability/GHSA-rv9v-r4vm-gj8x"}],"summary":"Miniscript allows stack consumption"}