Описание
Data races in im
An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2020-36204
- https://github.com/bodil/im-rs/issues/157
- https://github.com/bodil/im-rs/pull/158
- https://github.com/bodil/im-rs/commit/0b3a7b228b0fe70446393f55c8b893f349f3f6bd
- https://github.com/bodil/im-rs/releases/tag/v15.1.0
- https://rustsec.org/advisories/RUSTSEC-2020-0096.html
Пакеты
Наименование
im
rust
Затронутые версииВерсия исправления
>= 12.0.0, < 15.1.0
15.1.0
Связанные уязвимости
CVSS3: 4.7
nvd
около 5 лет назад
An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.