{"action":"Upgrade libsbc to 0.1.5 or later.","affected":[{"fixed":"0.1.5","introduced":"0.0.0-0"}],"component":"libsbc","cve_ids":["CVE-2020-36440"],"ecosystem":"crates.io","epss":0.00766,"exploited":false,"fixed_versions":["0.1.5"],"ghsa_id":"GHSA-f6g6-54hm-fhxv","id":"tcs_01M5KF6AC0QRSTYE87WVKPM2T3","modified_at":"2023-11-08T04:03:44.964292Z","published_at":"2020-11-10T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0120","https://crates.io/crates/libsbc","https://rustsec.org/advisories/RUSTSEC-2020-0120.html","https://github.com/mvertescher/libsbc-rs/issues/4"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0120","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0120"}],"summary":"`Decoder<R>` can carry `R: !Send` to other threads"}