{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"messagepack-rs","cve_ids":["CVE-2021-45690","CVE-2021-45691","CVE-2021-45692","CVE-2021-45693"],"ecosystem":"crates.io","epss":0.0123,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hr52-f9vp-582c","id":"tcs_01M5KF77TE4QN68XV6DNKX72HF","modified_at":"2024-03-15T00:05:17.689306Z","published_at":"2021-01-26T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0092","https://crates.io/crates/messagepack-rs","https://rustsec.org/advisories/RUSTSEC-2021-0092.html","https://github.com/otake84/messagepack-rs/issues/2"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0092","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0092"}],"summary":"Deserialization functions pass uninitialized memory to user-provided Read"}