{"action":"Upgrade tokio to 1.18.5 or later.","affected":[{"fixed":"1.18.5","introduced":"0.2.0"},{"fixed":"1.20.4","introduced":"1.19.0"},{"fixed":"1.24.2","introduced":"1.21.0"}],"component":"tokio","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["1.18.5","1.20.4","1.24.2"],"ghsa_id":"GHSA-4q83-7cq4-p6wg","id":"tcs_01M5KF89ADR7HKC58HJXPTCSMA","modified_at":"2023-11-08T04:15:17.465753Z","published_at":"2023-01-11T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0005","https://crates.io/crates/tokio","https://rustsec.org/advisories/RUSTSEC-2023-0005.html","https://github.com/tokio-rs/tokio/issues/5372"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0005","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0005"}],"summary":"`tokio::io::ReadHalf<T>::unsplit` is Unsound"}