{"action":"Upgrade safe-transmute to 0.10.1 or later.","affected":[{"fixed":"0.10.1","introduced":"0.4.0"}],"component":"safe-transmute","cve_ids":["CVE-2018-21000"],"ecosystem":"crates.io","epss":0.01977,"exploited":false,"fixed_versions":["0.10.1"],"ghsa_id":"GHSA-2v78-j59h-fmpf","id":"tcs_01M5KF56P9FRPCF70CB69QJMSX","modified_at":"2023-11-08T04:00:13.925381Z","published_at":"2018-11-27T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2018-0013","https://crates.io/crates/safe-transmute","https://rustsec.org/advisories/RUSTSEC-2018-0013.html","https://github.com/nabijaczleweli/safe-transmute-rs/pull/36"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2018-0013","url":"https://osv.dev/vulnerability/RUSTSEC-2018-0013"}],"summary":"Vec-to-vec transmutations could lead to heap overflow/corruption"}