Data races in concread

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...

a2d (>=0.1.0, <=0.1.11), abci-storage (0.0.3) +1567 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.1.0, =0.1.2 - acutescenes 0.1.0 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-5WG8-7C9Q-794V...

GHSA-5WG8-7C9Q-794V Data races in lock_api

An issue was discovered in the lockapi crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness...

futures-delay-queue (0.4.1), polymer (0.2.0) +4 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)

futures-intrusive CARGO version =0.2.2, =0.1.0, =0.1.2, =0.1.3-alpha.1 Source cves: CVE-2020-35915 Source advisory: GHSA-4HJG-CX88-G9F9...

futures-delay-queue (0.4.1), polymer (0.2.0) +4 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)

futures-intrusive CARGO version =0.2.2, =0.1.0, =0.1.2, =0.1.3-alpha.1 Source cves: CVE-2020-35915 Source advisory: OSV:GHSA-4HJG-CX88-G9F9...

GHSA-4HJG-CX88-G9F9 Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

a2d (>=0.1.0, <=0.1.11), abci-storage (0.0.3) +1567 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.1.0, =0.1.2 - acutescenes 0.1.0 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-VH4P-6J7G-F4J9...

GHSA-VH4P-6J7G-F4J9 Data races in lock_api

An issue was discovered in the lockapi crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness...

Data races in lock_api

An issue was discovered in the lockapi crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness...

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +611 more potentially affected by CVE-2020-35916 via image (>=0.2.4, <=0.23.10)

image CARGO version =0.2.4, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves: CVE-2020-35916 Source advisory: OSV:GHSA-9WGH-VJJ7-7433...

Reference counting error in pyo3

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From...

GHSA-2VX6-FCW6-HPR6 Reference counting error in pyo3

An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From...

gltfgen (>=0.4.5, <=0.5.0), gut (>=0.5.0, <=0.6.2) potentially affected by CVE-2020-35903 via dync (>=0.3.2, <=0.4.0)

dync CARGO version =0.3.2, =0.4.5, =0.5.0, =0.6.2 Source cves: CVE-2020-35903 Source advisory: OSV:GHSA-QXJQ-V4WF-PPVH...

GHSA-RQGX-HPG4-456R Use-after-free in actix-codec

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed...

Use-after-free in actix-codec

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed...

GHSA-V3J6-XF77-8R9C Use-after-free in actix-http

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...

Use-after-free in actix-http

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream...

GHSA-GMV4-VMX3-X9F3 Data races in lock_api

An issue was discovered in the lockapi crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness...

a2d (>=0.1.0, <=0.1.11), abci-storage (0.0.3) +1567 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.1.0, =0.1.2 - acutescenes 0.1.0 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-GMV4-VMX3-X9F3...

Data races in lock_api

An issue was discovered in the lockapi crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness...