{"action":"Upgrade rocket to 0.4.7 or later.","affected":[{"fixed":"0.4.7","introduced":"0.0.0-0"}],"component":"rocket","cve_ids":["CVE-2021-29935"],"ecosystem":"crates.io","epss":0.01025,"exploited":false,"fixed_versions":["0.4.7"],"ghsa_id":"GHSA-vcw4-8ph6-7vw8","id":"tcs_01M5KF6XHXK8CDDEM3CDYHKXXP","modified_at":"2023-11-08T04:05:43.819286Z","published_at":"2021-02-09T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0044","https://crates.io/crates/rocket","https://rustsec.org/advisories/RUSTSEC-2021-0044.html","https://github.com/SergioBenitez/Rocket/issues/1534"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0044","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0044"}],"summary":"Use after free possible in `uri::Formatter` on panic"}