{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"bit-flags","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"id":"tcs_01M5KF8YDJ7X4D0MFB28WR65PK","modified_at":"2026-03-26T06:31:19.052308Z","published_at":"2023-12-22T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2023-0124","https://crates.io/crates/bit-flags","https://rustsec.org/advisories/RUSTSEC-2023-0124.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2023-0124","url":"https://osv.dev/vulnerability/RUSTSEC-2023-0124"}],"summary":"`bit-flags` was removed from crates.io for malicious code"}