{"action":"Upgrade ordered-float to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0.2.2"},{"fixed":"2.0.1","introduced":"2.0.0-0"}],"component":"ordered-float","cve_ids":["CVE-2020-35923"],"ecosystem":"crates.io","epss":0.00392,"exploited":false,"fixed_versions":["1.1.1","2.0.1"],"ghsa_id":"GHSA-566x-hhrf-qf8m","id":"tcs_01M5KF62BJ76BS8HYMM9X6AF78","modified_at":"2023-11-08T04:03:39.590810Z","published_at":"2020-12-06T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0082","https://crates.io/crates/ordered-float","https://rustsec.org/advisories/RUSTSEC-2020-0082.html","https://github.com/reem/rust-ordered-float/pull/71"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0082","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0082"}],"summary":"ordered_float:NotNan may contain NaN after panic in assignment operators"}