{"action":"Upgrade bitvec to 0.17.4 or later.","affected":[{"fixed":"0.17.4","introduced":"0.11.0"}],"component":"bitvec","cve_ids":["CVE-2020-35862"],"ecosystem":"crates.io","epss":0.01649,"exploited":false,"fixed_versions":["0.17.4"],"ghsa_id":"GHSA-7cjc-hvxf-gqh7","id":"tcs_01M5KF5JPQ2YYZ7BJA18Z2Q5TN","modified_at":"2023-11-08T04:03:36.155899Z","published_at":"2020-03-27T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0007","https://crates.io/crates/bitvec","https://rustsec.org/advisories/RUSTSEC-2020-0007.html","https://github.com/myrrlyn/bitvec/issues/55"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0007","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0007"}],"summary":"use-after or double free of allocated memory"}