{"action":"Upgrade phonenumber to 0.3.6 or later.","affected":[{"fixed":"0.3.6","introduced":"0.3.3"}],"component":"phonenumber","cve_ids":["CVE-2024-39697"],"ecosystem":"crates.io","epss":0.00711,"exploited":false,"fixed_versions":["0.3.6"],"ghsa_id":"GHSA-mjw4-jj88-v687","id":"tcs_01M5KF9B0Z32JM03GTKJ3X985P","modified_at":"2026-10-13T15:19:21.218890299Z","published_at":"2024-07-07T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0369","https://crates.io/crates/phonenumber","https://rustsec.org/advisories/RUSTSEC-2024-0369.html","https://github.com/whisperfish/rust-phonenumber/issues/69","https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39697"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0369","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0369"}],"summary":"phonenumber: panic on parsing crafted phonenumber inputs"}