{"action":"Upgrade cookie to 0.7.6 or later.","affected":[{"fixed":"0.7.6","introduced":"0"}],"component":"cookie","cve_ids":["CVE-2017-18589"],"ecosystem":"crates.io","epss":0.01514,"exploited":false,"fixed_versions":["0.7.6"],"ghsa_id":"GHSA-vjrq-cg9x-rfjp","id":"tcs_01M5KF3MSAVJCK8P2J47WZENKM","modified_at":"2023-11-08T03:59:16.406669Z","published_at":"2021-08-25T20:43:02Z","references":["https://osv.dev/vulnerability/GHSA-vjrq-cg9x-rfjp","https://nvd.nist.gov/vuln/detail/CVE-2017-18589","https://github.com/SergioBenitez/cookie-rs/pull/86","https://github.com/SergioBenitez/cookie-rs/commit/ee18b79fbf0903b73da525d302b09448009e0050","https://github.com/alexcrichton/cookie-rs","https://rustsec.org/advisories/RUSTSEC-2017-0005.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vjrq-cg9x-rfjp","url":"https://osv.dev/vulnerability/GHSA-vjrq-cg9x-rfjp"}],"summary":"Improper Input Validation in cookie"}