Lucene search

K
osvGoogleOSV:RUSTSEC-2020-0134
HistoryNov 14, 2020 - 12:00 p.m.

`LockWeak<T>` allows to create data race to `T`.

2020-11-1412:00:00
Google
osv.dev
11
lockweak
data race
non-sync t
vulnerability

EPSS

0.003

Percentile

65.6%

In the affected versions of this crate, LockWeak&lt;T&gt; unconditionally implemented Send with no trait bounds on T. LockWeak&lt;T&gt; doesn’t own T and only provides &T.

This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races.

EPSS

0.003

Percentile

65.6%

Related for OSV:RUSTSEC-2020-0134