{"action":"Upgrade mp3-metadata to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0.0.0-0"}],"component":"mp3-metadata","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-927q-g9w9-pm54","id":"tcs_01M5KF9WGXSMX0AJ2V454CSSNX","modified_at":"2025-10-28T06:29:23.888737Z","published_at":"2025-04-28T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0027","https://crates.io/crates/mp3-metadata","https://rustsec.org/advisories/RUSTSEC-2025-0027.html","https://github.com/GuillaumeGomez/mp3-metadata/issues/36"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0027","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0027"}],"summary":"Panic in mp3-metadata due to the lack of bounds checking"}