{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.4.3"}],"component":"bigint","cve_ids":["CVE-2020-35880"],"ecosystem":"crates.io","epss":0.01534,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wgx2-6432-j3fw","id":"tcs_01M5KF42ZVQTK281AQW7JB8DJS","modified_at":"2023-11-08T04:03:37.195023Z","published_at":"2021-08-25T20:48:04Z","references":["https://osv.dev/vulnerability/GHSA-wgx2-6432-j3fw","https://nvd.nist.gov/vuln/detail/CVE-2020-35880","https://github.com/rustsec/advisory-db/pull/290","https://github.com/paritytech/bigint/commit/7e71521a61b009afc94c91135353102658550d42","https://github.com/paritytech/bigint","https://rustsec.org/advisories/RUSTSEC-2020-0025.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wgx2-6432-j3fw","url":"https://osv.dev/vulnerability/GHSA-wgx2-6432-j3fw"}],"summary":"Unsoundness in bigint"}