{"action":"Upgrade stackvector to 1.0.9 or later.","affected":[{"fixed":"1.0.9","introduced":"0.0.0-0"}],"component":"stackvector","cve_ids":["CVE-2021-29939"],"ecosystem":"crates.io","epss":0.01025,"exploited":false,"fixed_versions":["1.0.9"],"ghsa_id":"GHSA-9frf-r7c7-j2vg","id":"tcs_01M5KF6Y5S7D4SD57PHDYS29SC","modified_at":"2023-11-08T04:05:44.063920Z","published_at":"2021-02-19T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0048","https://crates.io/crates/stackvector","https://rustsec.org/advisories/RUSTSEC-2021-0048.html","https://github.com/Alexhuszagh/rust-stackvector/issues/2"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0048","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0048"}],"summary":"StackVec::extend can write out of bounds when size_hint is incorrect"}