{"action":"Upgrade gix-attributes to 0.22.3 or later.","affected":[{"fixed":"0.22.3","introduced":"0.0.0-0"}],"component":"gix-attributes","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.22.3"],"ghsa_id":"GHSA-cx7h-h87r-jpgr","id":"tcs_01M5KF99GPXGW9CA5Y3A3ZC014","modified_at":"2025-01-19T00:59:32.710269Z","published_at":"2024-07-24T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0359","https://crates.io/crates/gix-attributes","https://rustsec.org/advisories/RUSTSEC-2024-0359.html","https://github.com/GitoxideLabs/gitoxide/issues/1460"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0359","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0359"}],"summary":"The kstring integration in gix-attributes is unsound"}