{"action":"Upgrade tough to 0.12.0 or later.","affected":[{"fixed":"0.12.0","introduced":"0"}],"component":"tough","cve_ids":["CVE-2021-41149"],"ecosystem":"crates.io","epss":0.01113,"exploited":false,"fixed_versions":["0.12.0"],"ghsa_id":"GHSA-x3r5-q6mj-m485","id":"tcs_01M5KF4F7Y4SZSDD5347BYPJA9","modified_at":"2026-07-08T06:27:45.360550496Z","published_at":"2021-10-19T20:16:15Z","references":["https://osv.dev/vulnerability/GHSA-x3r5-q6mj-m485","https://github.com/awslabs/tough/security/advisories/GHSA-x3r5-q6mj-m485","https://nvd.nist.gov/vuln/detail/CVE-2021-41149","https://github.com/awslabs/tough/commit/1809b9bd1106d78a51fbea3071aa97a3530bac9a","https://github.com/awslabs/tough"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-x3r5-q6mj-m485","url":"https://osv.dev/vulnerability/GHSA-x3r5-q6mj-m485"}],"summary":"Improper sanitization of target names"}