Описание
Race condition in Parc
In the affected versions of this crate, LockWeak<T>
unconditionally implemented Send
with no trait bounds on T
. LockWeak<T>
doesn't own T
and only provides &T
. This allows concurrent access to a non-Sync T
, which can cause undefined behavior like data races.
Пакеты
Наименование
parc
rust
Затронутые версииВерсия исправления
<= 1.0.1
Отсутствует
8.1 High
CVSS3
Дефекты
CWE-362
8.1 High
CVSS3
Дефекты
CWE-362