{"action":"Upgrade phonenumber to 0.2.5 or later.","affected":[{"fixed":"0.2.5","introduced":"0"},{"fixed":"0.3.3","introduced":"0.3.0"}],"component":"phonenumber","cve_ids":["CVE-2023-42444"],"ecosystem":"crates.io","epss":0.00867,"exploited":false,"fixed_versions":["0.2.5","0.3.3"],"ghsa_id":"GHSA-whhr-7f2w-qqj2","id":"tcs_01M5KF43PQSPTVWGH2K9FPR0BS","modified_at":"2026-03-13T10:47:43.430911Z","published_at":"2023-09-21T17:10:57Z","references":["https://osv.dev/vulnerability/GHSA-whhr-7f2w-qqj2","https://github.com/whisperfish/rust-phonenumber/security/advisories/GHSA-whhr-7f2w-qqj2","https://nvd.nist.gov/vuln/detail/CVE-2023-42444","https://github.com/whisperfish/rust-phonenumber/commit/2dd44be94539c051b4dee55d1d9d349bd7bedde6","https://github.com/whisperfish/rust-phonenumber/commit/bea8e732b9cada617ede5cf51663dba183747f71","https://github.com/whisperfish/rust-phonenumber","https://rustsec.org/advisories/RUSTSEC-2023-0082.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-whhr-7f2w-qqj2","url":"https://osv.dev/vulnerability/GHSA-whhr-7f2w-qqj2"}],"summary":"phonenumber panics on parsing crafted RFC3966 inputs"}