{"action":"Upgrade hashconsing to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0.0.0-0"}],"component":"hashconsing","cve_ids":["CVE-2020-36215"],"ecosystem":"crates.io","epss":0.01377,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-rw2c-c256-3r53","id":"tcs_01M5KF67JDSYNP7XC813FVSHF5","modified_at":"2023-11-08T04:03:41.965428Z","published_at":"2020-11-10T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0107","https://crates.io/crates/hashconsing","https://rustsec.org/advisories/RUSTSEC-2020-0107.html","https://github.com/AdrienChampion/hashconsing/issues/1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0107","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0107"}],"summary":"hashconsing's HConsed lacks Send/Sync bound for its Send/Sync trait."}