{"action":"Upgrade buffered-reader to 1.0.2 or later.","affected":[{"fixed":"1.0.2","introduced":"0.0.0-0"},{"fixed":"1.1.5","introduced":"1.1.0"},{"fixed":"1.2.0","introduced":"1.2.0"}],"component":"buffered-reader","cve_ids":["CVE-2023-53161"],"ecosystem":"crates.io","epss":0.00393,"exploited":false,"fixed_versions":["1.0.2","1.1.5","1.2.0"],"ghsa_id":"GHSA-29mf-62xx-28jq","id":"tcs_01M5KF8FFXT8MEZG6XXBT2BFNY","modified_at":"2025-10-28T06:02:18Z","published_at":"2023-05-16T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0039","https://crates.io/crates/buffered-reader","https://rustsec.org/advisories/RUSTSEC-2023-0039.html","https://lists.sequoia-pgp.org/hyperkitty/list/announce@lists.sequoia-pgp.org/thread/SN2E3QRT4DMQ5JNEK6VIN6DJ5SH766DI/","https://gitlab.com/sequoia-pgp/sequoia/-/tags/buffered-reader%2Fv1.2.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0039","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0039"}],"summary":"Out-of-bounds array access leads to panic"}