{"action":"Upgrade rand_core to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0.6.0"}],"component":"rand_core","cve_ids":["CVE-2021-27378"],"ecosystem":"crates.io","epss":0.01238,"exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-w7j2-35mf-95p7","id":"tcs_01M5KF6S0JJ7VGET3DP26AZ2TC","modified_at":"2023-11-08T04:05:24.551510Z","published_at":"2021-02-12T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0023","https://crates.io/crates/rand_core","https://rustsec.org/advisories/RUSTSEC-2021-0023.html","https://github.com/rust-random/rand/pull/1096"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0023","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0023"}],"summary":"Incorrect check on buffer length when seeding RNGs"}