{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"hpack","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-w7hm-hmxv-pvhf","id":"tcs_01M5KF8QV3W2W0WK1B8CYSRACG","modified_at":"2026-07-22T17:45:03.860310154Z","published_at":"2023-09-15T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0085","https://crates.io/crates/hpack","https://rustsec.org/advisories/RUSTSEC-2023-0085.html","https://github.com/mlalic/hpack-rs/issues/11","https://github.com/sno2/hpack-rs-patched/commit/d669282924a95311599e9e7dd53869ee96b3a2f5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0085","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0085"}],"summary":"HPACK decoder panics on invalid input"}