{"action":"Upgrade syncpool to 0.1.6 or later.","affected":[{"fixed":"0.1.6","introduced":"0"}],"component":"syncpool","cve_ids":["CVE-2020-36462"],"ecosystem":"crates.io","epss":0.0124,"exploited":false,"fixed_versions":["0.1.6"],"ghsa_id":"GHSA-vp6r-mrq9-8f4h","id":"tcs_01M5KF3NN82ECPRCXYV7C1XDEK","modified_at":"2023-11-08T04:03:46.319786Z","published_at":"2021-08-25T20:58:11Z","references":["https://osv.dev/vulnerability/GHSA-vp6r-mrq9-8f4h","https://nvd.nist.gov/vuln/detail/CVE-2020-36462","https://github.com/Chopinsky/byte_buffer/issues/2","https://github.com/Chopinsky/byte_buffer/commit/15b282877d1e576de2b337d8162bbf43ed1a0f2d","https://github.com/Chopinsky/byte_buffer/tree/master/syncpool","https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/syncpool/RUSTSEC-2020-0142.md","https://rustsec.org/advisories/RUSTSEC-2020-0142.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-vp6r-mrq9-8f4h","url":"https://osv.dev/vulnerability/GHSA-vp6r-mrq9-8f4h"}],"summary":"Data race in syncpool"}