{"action":"Upgrade svix to 1.17.0 or later.","affected":[{"fixed":"1.17.0","introduced":"0.0.0-0"}],"component":"svix","cve_ids":["CVE-2024-21491"],"ecosystem":"crates.io","epss":0.0041,"exploited":false,"fixed_versions":["1.17.0"],"ghsa_id":"GHSA-747x-5m58-mq97","id":"tcs_01M5KF90X4EAJQBG6CMS7R8E6S","modified_at":"2024-02-15T01:26:41.857241Z","published_at":"2024-02-06T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0010","https://crates.io/crates/svix","https://rustsec.org/advisories/RUSTSEC-2024-0010.html","https://github.com/svix/svix-webhooks/pull/1190"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0010","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0010"}],"summary":"Improper comparison of different-length signatures"}