{"action":"Upgrade nano-id to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.0.0-0"}],"component":"nano-id","cve_ids":["CVE-2024-36400"],"ecosystem":"crates.io","epss":0.00754,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-2hfw-w739-p7x5","id":"tcs_01M5KF95X0PYSYJRCQ96K6TWCZ","modified_at":"2024-06-15T13:27:23.912492Z","published_at":"2024-06-03T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0343","https://crates.io/crates/nano-id","https://rustsec.org/advisories/RUSTSEC-2024-0343.html"],"severity":{"label":"critical","score":9.4},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0343","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0343"}],"summary":"Reduced entropy due to inadequate character set usage"}