{"action":"Upgrade cap-primitives to 3.4.1 or later.","affected":[{"fixed":"3.4.1","introduced":"0.0.0-0"}],"component":"cap-primitives","cve_ids":["CVE-2024-51756"],"ecosystem":"crates.io","epss":0.00583,"exploited":false,"fixed_versions":["3.4.1"],"ghsa_id":"GHSA-hxf5-99xg-86hw","id":"tcs_01M5KF9PG5FJRMCHA707WXD10N","modified_at":"2026-10-12T18:00:13.004711734Z","published_at":"2024-11-05T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0445","https://crates.io/crates/cap-primitives","https://rustsec.org/advisories/RUSTSEC-2024-0445.html","https://github.com/bytecodealliance/cap-std/pull/371","https://nvd.nist.gov/vuln/detail/CVE-2024-51756"],"severity":{"label":"low","score":2.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0445","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0445"},{"source":"nvd","source_id":"CVE-2024-51756","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51756"}],"summary":"cap-primitives doesn't fully sandbox all the Windows device filenames"}