{"action":"Upgrade versionize to 0.1.10 or later.","affected":[{"fixed":"0.1.10","introduced":"0.0.0-0"}],"component":"versionize","cve_ids":["CVE-2023-28448"],"ecosystem":"crates.io","epss":0.00556,"exploited":false,"fixed_versions":["0.1.10"],"ghsa_id":"GHSA-8vxc-r5wp-vgvc","id":"tcs_01M5KF8DQ1XNW9YWP4NG3M50JT","modified_at":"2023-11-08T04:12:11.444949Z","published_at":"2023-03-24T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0030","https://crates.io/crates/versionize","https://rustsec.org/advisories/RUSTSEC-2023-0030.html","https://github.com/firecracker-microvm/versionize/pull/53"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0030","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0030"}],"summary":"`Versionize::deserialize` implementation for `FamStructWrapper<T>` is lacking bound checks, potentially leading to out of bounds memory accesses"}