{"action":"Upgrade lazy-init to 0.4.1-0 or later.","affected":[{"fixed":"0.4.1-0","introduced":"0.0.0-0"}],"component":"lazy-init","cve_ids":["CVE-2021-25901"],"ecosystem":"crates.io","epss":0.01331,"exploited":false,"fixed_versions":["0.4.1-0"],"ghsa_id":"GHSA-w47j-hqpf-qw9w","id":"tcs_01M5KF6MW6HKNWHZ90KMAEXYT2","modified_at":"2023-11-08T04:05:16.553479Z","published_at":"2021-01-17T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0004","https://crates.io/crates/lazy-init","https://rustsec.org/advisories/RUSTSEC-2021-0004.html","https://github.com/khuey/lazy-init/issues/9"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0004","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0004"}],"summary":"Missing Send bound for Lazy"}