{"action":"Upgrade rgb to 0.8.20 or later.","affected":[{"fixed":"0.8.20","introduced":"0.5.4"}],"component":"rgb","cve_ids":["CVE-2020-25016"],"ecosystem":"crates.io","epss":0.01595,"exploited":false,"fixed_versions":["0.8.20"],"ghsa_id":"GHSA-g4rw-8m5q-6453","id":"tcs_01M5KF5QD96BA0TPM3FAW1NMGF","modified_at":"2023-11-08T04:03:09.114958Z","published_at":"2020-06-14T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0029","https://crates.io/crates/rgb","https://rustsec.org/advisories/RUSTSEC-2020-0029.html","https://github.com/kornelski/rust-rgb/issues/35"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0029","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0029"}],"summary":"Allows viewing and modifying arbitrary structs as bytes"}