12756 matches found
Data races in signal-simple
Affected versions of this crate unconditionally implement Send/Sync for SyncChannel. SyncChannel doesn't provide access to &T but merely serves as a channel that consumes and returns owned T. Users can create UB in safe Rust by sending T: !Send to other threads with SyncChannel::send/recv APIs...
Data races in async-coap
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Affected versions of this crate implement Send/Sync for ArcGuard with no trait bounds on RC. This allows users to send RC: !Send to other threads and also allows users to concurrently access Rc: !Sync from multiple...
GHSA-M7W4-8WP8-M2XQ Data races in beef
An issue was discovered in the beef crate before 0.5.0 for Rust. Affected versions of this crate did not have a T: Sync bound in the Send impl for Cow. This allows users to create data races by making Cow contain types that are Send && !Sync like Cell or RefCell. Such data races can lead to memor...
Data races in beef
An issue was discovered in the beef crate before 0.5.0 for Rust. Affected versions of this crate did not have a T: Sync bound in the Send impl for Cow. This allows users to create data races by making Cow contain types that are Send && !Sync like Cell or RefCell. Such data races can lead to memor...
GHSA-R626-FC64-3Q28 Data race in abox
Affected versions of this crate implements Send/Sync for AtomicBox without requiring T: Send/T: Sync. This allows to create data races to T: !Sync and send T: !Send to another thread. Such behavior breaks the compile-time thread safety guarantees of Rust, and allows users to incur undefined...
Data race in abox
Affected versions of this crate implements Send/Sync for AtomicBox without requiring T: Send/T: Sync. This allows to create data races to T: !Sync and send T: !Send to another thread. Such behavior breaks the compile-time thread safety guarantees of Rust, and allows users to incur undefined...
GHSA-GVCP-948F-8F2P Use of Uninitialized Resource in libp2p-deflate
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...
Use of Uninitialized Resource in libp2p-deflate
An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...
specs (>=0.8.0, <=0.8.1) potentially affected by CVE-2020-36439 via ticketed_lock (0.1.0)
ticketedlock CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ticketedlock and may be impacted: - specs =0.8.0, =0.8.1 Source cves: CVE-2020-36439 Source advisory: OSV:GHSA-77M6-X95J-75R5...
timeout_io (>=0.2.0, <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (0.3.2)
tinyfuture CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:GHSA-FG42-VWXX-XX5J...
Data race in conqueue
Affected versions of this crate unconditionally implemented Send/Sync for QueueSender, allowing to send non-Send T to other threads by invoking &QueueSender.send. This fails to prevent users from creating data races by sending types like Rc or Arc to other threads, which can lead to memory...
GHSA-M57C-4VVX-GJGQ Format string vulnerabilities in pancurses
An issue was discovered in the pancurses crate through 0.16.1 for Rust. printw and mvprintw have format string vulnerabilities...
askii (>=0.1.0, <=0.5.4), atomsh (0.1.0) +36 more potentially affected by CVE-2019-15546 via pancurses (>=0.6.0, <=0.16.1)
pancurses CARGO version =0.6.0, =0.1.0, =0.1.0, =0.3.2, =0.1.0, =0.4.0, =0.2.0, =0.4.0, =0.1.0, =2.0.0, =0.2.0, =0.1.2, =0.1.5 and more Source cves: CVE-2019-15546 Source advisory: OSV:GHSA-M57C-4VVX-GJGQ...
Format string vulnerabilities in pancurses
An issue was discovered in the pancurses crate through 0.16.1 for Rust. printw and mvprintw have format string vulnerabilities...
Uninitialized memory use in generator
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield during API calls...
GHSA-6C65-XCF5-299X Uninitialized memory use in generator
An issue was discovered in the generator crate before 0.6.18 for Rust. Uninitialized memory is used by Scope, done, and yield during API calls...
cargo (>=0.4.0, <=0.8.0), cargo-bump (0.0.0) +10 more potentially affected by CVE-2021-38511 via tar (>=0.2.14, <=0.3.4)
tar CARGO version =0.2.14, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2021-38511 Source advisory: OSV:GHSA-62JX-8VMH-4MCW...
ruspiro-boot (>=0.3.0, <=0.3.2), ruspiro-console (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2020-36435 via ruspiro-singleton (>=0.0.2, <=0.3.1)
ruspiro-singleton CARGO version =0.0.2, =0.3.0, =0.0.2, =0.0.2, =0.3.0, =0.1.0, =0.0.2, =0.4.0, =0.0.2, =0.3.1 Source cves: CVE-2020-36435 Source advisory: OSV:GHSA-FQQ2-XP7M-XVM8...