{"action":"Upgrade futures-intrusive to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.0.0-0"}],"component":"futures-intrusive","cve_ids":["CVE-2020-35915"],"ecosystem":"crates.io","epss":0.00379,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-4hjg-cx88-g9f9","id":"tcs_01M5KF602YX95QCZ2Q03934J7H","modified_at":"2023-11-08T04:03:39.161436Z","published_at":"2020-10-31T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0072","https://crates.io/crates/futures-intrusive","https://rustsec.org/advisories/RUSTSEC-2020-0072.html","https://github.com/Matthias247/futures-intrusive/issues/53"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0072","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0072"}],"summary":"GenericMutexGuard allows data races of non-Sync types across threads"}