{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.0.0-0"}],"component":"mysten-metrics","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-g38r-8gmr-ghrf","id":"tcs_01M5KFB9PW5BJV3SKDHHGM8HRF","modified_at":"2026-05-06T06:32:50Z","published_at":"2026-04-22T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0107","https://crates.io/crates/mysten-metrics","https://rustsec.org/advisories/RUSTSEC-2026-0107.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0107","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0107"}],"summary":"`mysten-metrics` was removed from crates.io for malicious code"}