{"action":"Upgrade rusqlite to 0.25.4 or later.","affected":[{"fixed":"0.25.4","introduced":"0.25.0"},{"fixed":"0.26.2","introduced":"0.26.0-0"}],"component":"rusqlite","cve_ids":["CVE-2021-45713","CVE-2021-45714","CVE-2021-45715","CVE-2021-45716","CVE-2021-45717","CVE-2021-45718","CVE-2021-45719"],"ecosystem":"crates.io","epss":0.01219,"exploited":false,"fixed_versions":["0.25.4","0.26.2"],"ghsa_id":"GHSA-4qr3-m7ww-hh9g","id":"tcs_01M5KF7FFDFZE9VM0BT86JHXS9","modified_at":"2024-03-15T00:05:18.748750Z","published_at":"2021-12-07T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0128","https://crates.io/crates/rusqlite","https://rustsec.org/advisories/RUSTSEC-2021-0128.html","https://github.com/rusqlite/rusqlite/issues/1048"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0128","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0128"}],"summary":"Incorrect Lifetime Bounds on Closures in `rusqlite`"}