{"action":"Upgrade tokio-rustls to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0.12.0"},{"fixed":"0.13.1","introduced":"0.13.0"}],"component":"tokio-rustls","cve_ids":["CVE-2020-35875"],"ecosystem":"crates.io","epss":0.01352,"exploited":false,"fixed_versions":["0.12.3","0.13.1"],"ghsa_id":"GHSA-2jfv-g3fh-xq3v","id":"tcs_01M5KF5N7BNYGJGRECEGE43DQA","modified_at":"2023-11-08T04:03:36.949759Z","published_at":"2020-05-19T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0019","https://crates.io/crates/tokio-rustls","https://rustsec.org/advisories/RUSTSEC-2020-0019.html","https://github.com/tokio-rs/tls/pull/14"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0019","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0019"}],"summary":"tokio-rustls reads may cause excessive memory usage"}