{"action":"Upgrade arrow to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0.0.0-0"}],"component":"arrow","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-qgrp-8f3v-q85p","id":"tcs_01M5KF7DFRPNG1Q1HMHKQXT8G4","modified_at":"2023-11-08T04:22:13.226192Z","published_at":"2021-09-14T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0118","https://crates.io/crates/arrow","https://rustsec.org/advisories/RUSTSEC-2021-0118.html","https://github.com/apache/arrow-rs/issues/774"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0118","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0118"}],"summary":"`FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets"}