{"action":"Upgrade once_cell to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0.2.5"}],"component":"once_cell","cve_ids":["CVE-2019-16141"],"ecosystem":"crates.io","epss":0.01583,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-7j44-fv4x-79g9","id":"tcs_01M5KF5CKM0E79ECBJBRW8ZVBS","modified_at":"2023-11-08T04:01:16.284220Z","published_at":"2019-09-01T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2019-0017","https://crates.io/crates/once_cell","https://rustsec.org/advisories/RUSTSEC-2019-0017.html","https://github.com/matklad/once_cell/issues/46"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2019-0017","url":"https://osv.dev/vulnerability/RUSTSEC-2019-0017"}],"summary":"Panic during initialization of Lazy<T> might trigger undefined behavior"}