{"action":"Upgrade blurhash to 0.2.0 or later.","affected":[{"fixed":"0.2.0","introduced":"0.0.0-0"}],"component":"blurhash","cve_ids":["CVE-2023-42447"],"ecosystem":"crates.io","epss":0.00624,"exploited":false,"fixed_versions":["0.2.0"],"ghsa_id":"GHSA-cxvp-82cq-57h2","id":"tcs_01M5KF8QH3AZ7G0KB5TFXSPF8B","modified_at":"2026-10-13T15:15:50.817581277Z","published_at":"2023-09-19T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0083","https://crates.io/crates/blurhash","https://rustsec.org/advisories/RUSTSEC-2023-0083.html","https://github.com/whisperfish/blurhash-rs/commit/e1b3209734d2a2704ed5ddcf61dc0beab6caa64d","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42447"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0083","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0083"}],"summary":"blurhash: panic on parsing crafted blurhash inputs"}