CVE-2020-36458

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

CVE-2020-36458

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

CVE-2020-36458

The CVE-2020-36458 issue concerns the Rust lexer crate, where ReaderResult has a Sync implementation bounded by T: Send, E: Send. This mis-bounding can allow a non-Sync T or E to be accessed across threads via &T or &E, creating a potential data race and memory corruption. Affected component: lex...

lavellang (=0.3.0), querylib (>=0.2.0 <=0.5.0) potentially affected by CVE-2020-36458 via lexer (=0.1.18)

lexer CARGO version =0.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on lexer and may be impacted: - lavellang =0.3.0 - querylib =0.2.0, =0.5.0 Source cves: CVE-2020-36458 Source advisory: OSV:RUSTSEC-2020-0138...