{"action":"Upgrade ferris-says to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0.1.3-0"}],"component":"ferris-says","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-v363-rrf2-5fmj","id":"tcs_01M5KF8YX9G3CPN03JQ41GXNBF","modified_at":"2024-02-10T16:26:48.909247Z","published_at":"2024-01-13T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0001","https://crates.io/crates/ferris-says","https://rustsec.org/advisories/RUSTSEC-2024-0001.html","https://github.com/rust-lang/ferris-says/pull/21"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0001","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0001"}],"summary":"Unsound use of str::from_utf8_unchecked on bytes which are not UTF-8"}