{"action":"Upgrade libpulse-binding to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0.0.0-0"}],"component":"libpulse-binding","cve_ids":["CVE-2019-25055"],"ecosystem":"crates.io","epss":0.01216,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-wcxc-jf6c-8rx9","id":"tcs_01M5KF5GQCPAXG6W6VTTNW6XD7","modified_at":"2023-11-08T04:01:32.736309Z","published_at":"2019-03-10T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2019-0038","https://crates.io/crates/libpulse-binding","https://rustsec.org/advisories/RUSTSEC-2019-0038.html","https://github.com/jnqnfe/pulse-binding-rust/commit/7fd282aef7787577c385aed88cb25d004b85f494"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2019-0038","url":"https://osv.dev/vulnerability/RUSTSEC-2019-0038"},{"source":"nvd","source_id":"CVE-2019-25055","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25055"}],"summary":"Fix for UB in failure to catch panics crossing FFI boundaries"}