{"action":"Upgrade bumpalo to 3.11.1 or later.","affected":[{"fixed":"3.11.1","introduced":"1.1.0"}],"component":"bumpalo","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.11.1"],"ghsa_id":"GHSA-f85w-wvc7-crwc","id":"tcs_01M5KF83BXK0ZE7VCTKMRBPKD1","modified_at":"2023-11-08T04:18:53.654955Z","published_at":"2022-01-14T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0078","https://crates.io/crates/bumpalo","https://rustsec.org/advisories/RUSTSEC-2022-0078.html","https://github.com/fitzgen/bumpalo/blob/main/CHANGELOG.md#3111"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0078","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0078"}],"summary":"Use-after-free due to a lifetime error in `Vec::into_iter()`"}