{"action":"Upgrade tonic to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0.12.2"}],"component":"tonic","cve_ids":["CVE-2024-47609"],"ecosystem":"crates.io","epss":0.00622,"exploited":false,"fixed_versions":["0.12.3"],"ghsa_id":"GHSA-4jwc-w2hc-78qv","id":"tcs_01M5KF9CBW1FNF24YABHHBBRNS","modified_at":"2026-10-12T18:00:12.403664088Z","published_at":"2024-10-01T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0376","https://crates.io/crates/tonic","https://rustsec.org/advisories/RUSTSEC-2024-0376.html","https://github.com/hyperium/tonic/issues/1897"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0376","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0376"},{"source":"nvd","source_id":"CVE-2024-47609","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47609"}],"summary":"Remotely exploitable Denial of Service in Tonic"}