Data races in cache

An issue was discovered in the cache crate through 2020-11-24 for Rust. Affected versions of this crate unconditionally implement Send/Sync for Cache. This allows users to insert K that is not Send or not Sync. This allows users to create data races by using non-Send types like Arc or Rc as K in...

GHSA-G83M-67WH-WHPW Command injection in kekbit

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

Command injection in kekbit

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

arae (>=0.1.0, <=0.2.0), arcstr (>=0.2.0, <=1.1.4) +22 more potentially affected by CVE-2020-36471 via generator (0.6.25)

generator CARGO version 0.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on generator and may be impacted: - arae =0.1.0, =0.2.0, =0.1.0, =0.0.1, =0.9.2, =0.8.2, =0.2.1, =0.11.2, =0.1.0, =0.1.0, =0.3.0, =0.3.2 and more Source cves: CVE-2020-36471...

GHSA-W9R2-QRPM-4RMJ Data race in disrustor

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

Data race in disrustor

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

Use after free in libpulse-binding

Overview Version 1.2.1 of the libpulse-binding Rust crate, released on the 15th of June 2018, fixed a pair of use-after-free issues with the objects returned by the getformatinfo and getcontext methods of Stream objects. These objects were mistakenly being constructed without setting an important...

GHSA-GHPQ-VJXW-CH5W Use after free in libpulse-binding

Overview Version 1.2.1 of the libpulse-binding Rust crate, released on the 15th of June 2018, fixed a pair of use-after-free issues with the objects returned by the getformatinfo and getcontext methods of Stream objects. These objects were mistakenly being constructed without setting an important...

Unaligned memory access in rand_core

Impact Affected versions of this crate violated alignment when casting byte slices to integer slices, resulting in undefined behavior. randcore::BlockRng::nextu64 and randcore::BlockRng::fillbytes are affected. Patches The flaw was corrected by Ralf Jung and Diggory Hardy for randcore = 0.4.2...

GHSA-MMC9-PWM7-QJ5W Unaligned memory access in rand_core

Impact Affected versions of this crate violated alignment when casting byte slices to integer slices, resulting in undefined behavior. randcore::BlockRng::nextu64 and randcore::BlockRng::fillbytes are affected. Patches The flaw was corrected by Ralf Jung and Diggory Hardy for randcore = 0.4.2...

GHSA-VC2P-R46X-M3VX Argument injection in lettre

Impact Affected versions of lettre allowed argument injection to the sendmail command. It was possible, using forged to addresses, to pass arbitrary arguments to the sendmail executable. Depending on the implementation original sendmail, postfix, exim, etc. it could be possible in some cases to...

a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +3872 more potentially affected by CVE-2020-26235 via time (>=0.1.25, <=0.2.22)

time CARGO version =0.1.25, =0.1.0, =0.1.7, =0.5.0, =0.0.3, =0.1.0, =0.2.9, =0.6.0, =0.19.0 - admin 0.1.1 - admiral 0.1.0 - admiral-derive 0.1.0 - admiral-types 0.1.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:GHSA-WCG3-CVX6-7396...

GHSA-GX5W-RRHP-F436 XSS in mdBook

This is a cross-post of the official security advisoryml. The official post contains a signed version with our PGP key, as well. ml: https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0 The Rust Security Response Working Group was recently notified of a security issue affecti...

XSS in mdBook

This is a cross-post of the official security advisoryml. The official post contains a signed version with our PGP key, as well. ml: https://groups.google.com/g/rustlang-security-announcements/c/3-sO6of29O0 The Rust Security Response Working Group was recently notified of a security issue affecti...

GHSA-3358-4F7F-P4J4 Use after free in generic-array

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes...

artano (0.2.6), bbox (>=0.7.0, <=0.8.2) +123 more potentially affected by CVE-2020-36465 via generic-array (0.8.4)

generic-array CARGO version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on generic-array and may be impacted: - artano 0.2.6 - bbox =0.7.0, =0.4.0-beta, =0.1.1, =0.2.0, =1.0.0, =0.1.0, =0.2.0, =0.6.0-rc1, =0.6.2 - elfkit 0.0.5 -...

GHSA-QGWF-R2JJ-2CCV Use after free in heapless

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

Use after free in heapless

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

accelerometer (0.3.0), aead (>=0.1.2, <=0.4.0-pre) +251 more potentially affected by CVE-2020-36464 via heapless (>=0.2.7, <=0.5.6)

heapless CARGO version =0.2.7, =0.1.2, =0.1.0, =0.2.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.1.0, =0.1.1 - async-stm32f1xx 0.3.0 and more Source cves: CVE-2020-36464 Source advisory: OSV:GHSA-QGWF-R2JJ-2CCV...

Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...