Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0128
HistoryNov 24, 2020 - 12:00 p.m.

Cache<K>: Send/Sync impls needs trait bounds on `K`

2020-11-2412:00:00
Google
osv.dev
6

0.002 Low

EPSS

Percentile

58.8%

Affected versions of this crate unconditionally implement Send/Sync for Cache&lt;K&gt;.
This allows users to insert K that is not Send or not Sync.

This allows users to create data races by using non-Send types like Arc&lt;Cell&lt;T&gt;&gt; or Rc&lt;T&gt; as K in Cache&lt;K&gt;. It is also possible to create data races by using types like Cell&lt;T&gt; or RefCell&lt;T&gt; (types that are Send but not Sync).
Such data races can lead to memory corruption.

0.002 Low

EPSS

Percentile

58.8%

Related for OSV:RUSTSEC-2020-0128