{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.8.0"}],"component":"users","cve_ids":["CVE-2025-5791"],"ecosystem":"crates.io","epss":0.00197,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m65q-v92h-cm7q","id":"tcs_01M5KF9Z60MHW3S45BVTY2CMTX","modified_at":"2025-10-28T06:28:57.282109Z","published_at":"2025-01-15T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0040","https://crates.io/crates/users","https://rustsec.org/advisories/RUSTSEC-2025-0040.html","https://github.com/ogham/rust-users/issues/44"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0040","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0040"},{"source":"nvd","source_id":"CVE-2025-5791","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5791"}],"summary":"`root` appended to group listings"}