{"action":"Upgrade ic-cdk to 0.8.2 or later.","affected":[{"fixed":"0.8.2","introduced":"0.8.0"},{"fixed":"0.9.3","introduced":"0.9.0-0"},{"fixed":"0.10.1","introduced":"0.10.0-0"},{"fixed":"0.11.6","introduced":"0.11.0-0"},{"fixed":"0.12.2","introduced":"0.12.0-0"},{"fixed":"0.13.5","introduced":"0.13.0-0"},{"fixed":"0.14.1","introduced":"0.14.0-0"},{"fixed":"0.15.1","introduced":"0.15.0-0"},{"fixed":"0.16.0","introduced":"0.16.0-0"}],"component":"ic-cdk","cve_ids":["CVE-2024-7884"],"ecosystem":"crates.io","epss":0.00693,"exploited":false,"fixed_versions":["0.8.2","0.9.3","0.10.1","0.11.6","0.12.2","0.13.5","0.14.1","0.15.1","0.16.0"],"ghsa_id":"GHSA-rwq6-crjg-9cpw","id":"tcs_01M5KF9BNGJ6XN78MFAMFYX79H","modified_at":"2024-09-07T18:23:36Z","published_at":"2024-09-05T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0372","https://crates.io/crates/ic-cdk","https://rustsec.org/advisories/RUSTSEC-2024-0372.html","https://github.com/dfinity/cdk-rs/pull/509"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0372","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0372"}],"summary":"Memory leak when calling a canister method via `ic_cdk::call`"}