{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"rio","cve_ids":["CVE-2020-35876"],"ecosystem":"crates.io","epss":0.0156,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8rc5-mr4f-m243","id":"tcs_01M5KF5NJZZC5MRVVHDF7J8FE4","modified_at":"2023-11-08T04:03:37.009424Z","published_at":"2020-05-11T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0021","https://crates.io/crates/rio","https://rustsec.org/advisories/RUSTSEC-2020-0021.html","https://github.com/spacejam/rio/issues/11"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0021","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0021"}],"summary":"rio allows a use-after-free buffer access when a future is leaked"}