dataflow (0.1.0), fasten (>=0.1.8, <=0.4.4) +5 more potentially affected by CVE-2020-36463 via multiqueue (0.3.2)

multiqueue CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on multiqueue and may be impacted: - dataflow 0.1.0 - fasten =0.1.8, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.6, =0.1.7 Source cves: CVE-2020-36463 Source advisory:...

Data races in dces

An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore. This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races...

GHSA-HXW9-JXQW-JC8J Data races in dces

An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore. This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races...

orbtk (>=0.3.0-alpha-1, <=0.3.1-alpha2), orbtk-api (>=0.3.0-alpha1, <=0.3.1-alpha2) +2 more potentially affected by CVE-2020-36459 via dces (0.2.0)

dces CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on dces and may be impacted: - orbtk =0.3.0-alpha-1, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.1-alpha2 Source cves: CVE-2020-36459 Source advisory: OSV:GHSA-HXW9-JXQW-JC8J...

GHSA-2R6Q-6C8C-G762 Data races in toolshed

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type...

Data races in toolshed

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type...

alkyne (0.1.0), dioxus-core (0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0, <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:GHSA-2R6Q-6C8C-G762...

Data races in slock

An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock unconditionally implements Send and Sync...

GHSA-MC36-5M36-HJH5 Data races in slock

An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock unconditionally implements Send and Sync...

Data races in lever

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox implements the Send and Sync traits for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

GHSA-9PP4-8P8V-G78W Data races in lever

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox implements the Send and Sync traits for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

rustracts (0.2.0) potentially affected by CVE-2020-36454 via parc (1.0.1)

parc CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on parc and may be impacted: - rustracts 0.2.0 Source cves: CVE-2020-36454 Source advisory: OSV:GHSA-29V7-3V4C-GF38...

Memory corruption in array-tools

An issue was discovered in the array-tools crate before 0.3.2 for Rust. Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

GHSA-6WP2-FW3V-MFMC Memory corruption in array-tools

An issue was discovered in the array-tools crate before 0.3.2 for Rust. Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

GHSA-GVVV-W559-2HG6 Data races in scottqueue

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

Data races in scottqueue

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

Data races in cache

An issue was discovered in the cache crate through 2020-11-24 for Rust. Affected versions of this crate unconditionally implement Send/Sync for Cache. This allows users to insert K that is not Send or not Sync. This allows users to create data races by using non-Send types like Arc or Rc as K in...

GHSA-G83M-67WH-WHPW Command injection in kekbit

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

Command injection in kekbit

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

arae (>=0.1.0, <=0.2.0), arcstr (>=0.2.0, <=1.1.4) +22 more potentially affected by CVE-2020-36471 via generator (0.6.25)

generator CARGO version 0.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on generator and may be impacted: - arae =0.1.0, =0.2.0, =0.1.0, =0.0.1, =0.9.2, =0.8.2, =0.2.1, =0.11.2, =0.1.0, =0.1.0, =0.3.0, =0.3.2 and more Source cves: CVE-2020-36471...