{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"rustdecimal","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7pwq-f4pq-78gm","id":"tcs_01M5KF7X98KR8BXF7H2T4K399K","modified_at":"2026-03-17T22:45:08.611431Z","published_at":"2022-05-10T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0042","https://crates.io/crates/rustdecimal","https://rustsec.org/advisories/RUSTSEC-2022-0042.html","https://groups.google.com/g/rustlang-security-announcements/c/5DVtC8pgJLw?pli=1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0042","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0042"}],"summary":"malicious crate `rustdecimal`"}