{"action":"Upgrade axum-core to 0.2.8 or later.","affected":[{"fixed":"0.2.8","introduced":"0.0.0-0"},{"fixed":"0.3.0-rc.2","introduced":"0.3.0-rc.1"}],"component":"axum-core","cve_ids":["CVE-2022-3212"],"ecosystem":"crates.io","epss":0.01002,"exploited":false,"fixed_versions":["0.2.8","0.3.0-rc.2"],"ghsa_id":"GHSA-m77f-652q-wwp4","id":"tcs_01M5KF7YWATN4CH1DX98DEY1GC","modified_at":"2023-11-08T04:09:34.414125Z","published_at":"2022-08-31T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0055","https://crates.io/crates/axum-core","https://rustsec.org/advisories/RUSTSEC-2022-0055.html","https://github.com/tokio-rs/axum/pull/1346"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0055","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0055"}],"summary":"No default limit put on request bodies"}