{"action":"Upgrade lock_api to 0.4.2 or later.","affected":[{"fixed":"0.4.2","introduced":"0.0.0-0"}],"component":"lock_api","cve_ids":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914"],"ecosystem":"crates.io","epss":0.00331,"exploited":false,"fixed_versions":["0.4.2"],"ghsa_id":"GHSA-5wg8-7c9q-794v","id":"tcs_01M5KF5ZG3NEY2PQZGGWT8KTC1","modified_at":"2024-03-15T00:05:20.102470Z","published_at":"2020-11-08T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0070","https://crates.io/crates/lock_api","https://rustsec.org/advisories/RUSTSEC-2020-0070.html","https://github.com/Amanieu/parking_lot/pull/262"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0070","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0070"}],"summary":"Some lock_api lock guard objects can cause data races"}