{"action":"Upgrade kamadak-exif to 0.5.3 or later.","affected":[{"fixed":"0.5.3","introduced":"0.5.2"}],"component":"kamadak-exif","cve_ids":["CVE-2021-21235"],"ecosystem":"crates.io","epss":0.01534,"exploited":false,"fixed_versions":["0.5.3"],"ghsa_id":"GHSA-px9g-8hgv-jvg2","id":"tcs_01M5KF7J64MJ2K567687GZJFYX","modified_at":"2023-11-08T04:04:38.884291Z","published_at":"2021-01-04T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0143","https://crates.io/crates/kamadak-exif","https://rustsec.org/advisories/RUSTSEC-2021-0143.html","https://github.com/kamadak/exif-rs/commit/1b05eab57e484cd7d576d4357b9cda7fdc57df8c"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0143","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0143"}],"summary":"kamadak-exif DoS with untrusted PNG data"}