{"action":"Upgrade mozjpeg to 0.8.19 or later.","affected":[{"fixed":"0.8.19","introduced":"0.0.0-0"}],"component":"mozjpeg","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.8.19"],"ghsa_id":"GHSA-v8gq-5grq-9728","id":"tcs_01M5KF6KPY1GTFX51ZCEM33W9M","modified_at":"2023-11-08T04:23:09.541378Z","published_at":"2020-07-04T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2020-0165","https://crates.io/crates/mozjpeg","https://rustsec.org/advisories/RUSTSEC-2020-0165.html","https://github.com/ImageOptim/mozjpeg-rust/issues/10","https://github.com/kornelski/rust-rgb/issues/35","https://rustsec.org/advisories/RUSTSEC-2020-0029.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2020-0165","url":"https://osv.dev/vulnerability/RUSTSEC-2020-0165"}],"summary":"mozjpeg DecompressScanlines::read_scanlines is Unsound"}