{"action":"Upgrade va-ts to 0.0.4 or later.","affected":[{"fixed":"0.0.4","introduced":"0.0.0-0"}],"component":"va-ts","cve_ids":["CVE-2020-36220"],"ecosystem":"crates.io","epss":0.00811,"exploited":false,"fixed_versions":["0.0.4"],"ghsa_id":"GHSA-3hj2-hh36-hv9v","id":"tcs_01M5KF68RM0HXJE3DCNNZ9RDWB","modified_at":"2023-11-08T04:03:42.275700Z","published_at":"2020-12-22T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0114","https://crates.io/crates/va-ts","https://rustsec.org/advisories/RUSTSEC-2020-0114.html","https://github.com/video-audio/va-ts/issues/4"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0114","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0114"}],"summary":"`Demuxer` can carry non-Send types across thread boundaries"}