{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.6.0","last_affected":"0.7.1"}],"component":"crayon","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xfhw-6mc4-mgxf","id":"tcs_01M5KF4Q4TNBVMX2F10N7199R9","modified_at":"2024-04-11T16:41:43.882509Z","published_at":"2024-04-05T15:40:40Z","references":["https://osv.dev/vulnerability/GHSA-xfhw-6mc4-mgxf","https://github.com/shawnscode/crayon/issues/109","https://github.com/shawnscode/crayon/commit/c2fde19caf6149d91faa504263f0bc5cafc35de5","https://github.com/shawnscode/crayon","https://rustsec.org/advisories/RUSTSEC-2024-0018.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xfhw-6mc4-mgxf","url":"https://osv.dev/vulnerability/GHSA-xfhw-6mc4-mgxf"}],"summary":"crayon: ObjectPool creates uninitialized memory when freeing objects"}