{"action":"Upgrade tracing-subscriber to 0.3.20 or later.","affected":[{"fixed":"0.3.20","introduced":"0.0.0-0"}],"component":"tracing-subscriber","cve_ids":["CVE-2025-58160"],"ecosystem":"crates.io","epss":0.00341,"exploited":false,"fixed_versions":["0.3.20"],"ghsa_id":"GHSA-xwfj-jgwm-7wp5","id":"tcs_01M5KFA1VNPYGPA92FFA54QKXR","modified_at":"2026-10-12T18:00:11.495445205Z","published_at":"2025-08-29T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2025-0055","https://crates.io/crates/tracing-subscriber","https://rustsec.org/advisories/RUSTSEC-2025-0055.html","https://github.com/tokio-rs/tracing/pull/3368"],"severity":{"label":"low","score":2.3},"sources":[{"source":"osv","source_id":"RUSTSEC-2025-0055","url":"https://osv.dev/vulnerability/RUSTSEC-2025-0055"},{"source":"nvd","source_id":"CVE-2025-58160","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58160"}],"summary":"Logging user input may result in poisoning logs with ANSI escape sequences"}