{"action":"Upgrade tokio to 1.8.4 or later.","affected":[{"fixed":"1.8.4","introduced":"0.1.14"},{"fixed":"1.13.1","introduced":"1.9.0"}],"component":"tokio","cve_ids":["CVE-2021-45710"],"ecosystem":"crates.io","epss":0.01239,"exploited":false,"fixed_versions":["1.8.4","1.13.1"],"ghsa_id":"GHSA-fg7r-2g4j-5cgr","id":"tcs_01M5KF7ENWRTDS6ZZQXV6GABCR","modified_at":"2023-11-08T04:07:23.239744Z","published_at":"2021-11-16T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0124","https://crates.io/crates/tokio","https://rustsec.org/advisories/RUSTSEC-2021-0124.html","https://github.com/tokio-rs/tokio/issues/4225"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0124","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0124"}],"summary":"Data race when sending and receiving after closing a `oneshot` channel"}