{"action":"Upgrade lever to 0.1.1 or later.","affected":[{"fixed":"0.1.1","introduced":"0.0.0-0"}],"component":"lever","cve_ids":["CVE-2020-36457"],"ecosystem":"crates.io","epss":0.0124,"exploited":false,"fixed_versions":["0.1.1"],"ghsa_id":"GHSA-9pp4-8p8v-g78w","id":"tcs_01M5KF6DXWW96MGHXQ81V6JCEF","modified_at":"2023-11-08T04:03:46.012738Z","published_at":"2020-11-10T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0137","https://crates.io/crates/lever","https://rustsec.org/advisories/RUSTSEC-2020-0137.html","https://github.com/vertexclique/lever/issues/15"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0137","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0137"}],"summary":"AtomicBox<T> lacks bound on its Send and Sync traits allowing data races"}