bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

EUVD-2021-1785

Malware in sbrugna...

Malicious code in test-mlw2-saber-bunch-noggs-treks (npm)

The package test-mlw2-saber-bunch-noggs-treks was found to contain malicious code...

Malicious code in test-mlw2-tammy-bunch (npm)

The package test-mlw2-tammy-bunch was found to contain malicious code...

MAL-2025-36402 Malicious code in test-mlw2-tammy-bunch (npm)

The package test-mlw2-tammy-bunch was found to contain malicious code...

MAL-2025-36152 Malicious code in test-mlw2-saber-bunch-noggs-treks (npm)

The package test-mlw2-saber-bunch-noggs-treks was found to contain malicious code...

CVE-2020-36450

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

Data races in bunch

An issue was discovered in the bunch crate through 2020-11-12 for Rust. Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T...

GHSA-JWPH-QP5H-F9WJ Data races in bunch

An issue was discovered in the bunch crate through 2020-11-12 for Rust. Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T...

CVE-2020-36450

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

CVE-2020-36450

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

Design/Logic Flaw

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

CVE-2020-36450

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

CVE-2020-36450

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

CVE-2020-36450

The CVE-2020-36450 issue affects the Rust crate payload “bunch” (through 2020-11-12) where Bunch unconditionally implements Send and Sync. This design allows inserting T values that are not Send/Sync (e.g., T: !Send, T: !Sync) and using Bunch across threads (for example via Bunch::get() returning...

CVE-2020-36450: Improper Neutralization of Special Elements used in a Command

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

garbo (>=0.1.0, <=0.2.0) potentially affected by CVE-2020-36450 via bunch (0.1.0)

bunch CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bunch and may be impacted: - garbo =0.1.0, =0.2.0 Source cves: CVE-2020-36450 Source advisory: OSV:RUSTSEC-2020-0130...

RUSTSEC-2020-0130 Bunch<T> unconditionally implements Send/Sync

Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T from multiple threads. It is also possible to send T: !Send to other...

PT-2020-17631

Name of the Vulnerable Software and Affected Versions bunch crate versions through 2020-11-12 Description The issue concerns unconditional implementations of Send and Sync for Bunch. This allows users to insert T: !Sync to Bunch, potentially creating a data race by invoking the Bunch::get API fro...

CVE-2020-10125

NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor BNA software updates, which can be broken by an attacker with physical access in a sufficiently short period of time, thereby enabling the attacker to sign arbitrary files...