{"action":"Upgrade lazy-init to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"lazy-init","cve_ids":["CVE-2021-25901"],"ecosystem":"crates.io","epss":0.01331,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-w47j-hqpf-qw9w","id":"tcs_01M5KF3VES7J5P6H487FA3VVHC","modified_at":"2023-11-08T04:05:16.553479Z","published_at":"2021-08-25T20:52:59Z","references":["https://osv.dev/vulnerability/GHSA-w47j-hqpf-qw9w","https://nvd.nist.gov/vuln/detail/CVE-2021-25901","https://github.com/khuey/lazy-init/issues/9","https://github.com/khuey/lazy-init","https://rustsec.org/advisories/RUSTSEC-2021-0004.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w47j-hqpf-qw9w","url":"https://osv.dev/vulnerability/GHSA-w47j-hqpf-qw9w"}],"summary":"Out of bounds read in lazy-init"}