Lucene search
K

12 matches found

Github Security Blog
Github Security Blog
added 2026/06/12 8:9 p.m.21 views

PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures

PyCFunction::newclosure and the temporary newclosurebound complement in the 0.21–0.22 series required the supplied closure to be Send + 'static but not Sync. The resulting PyCFunction is a Python callable that can be invoked from any Python thread, which means the closure may be called concurrent...

5.6AI score
Exploits0References4Affected Software1
OSV
OSV
added 2026/06/12 8:9 p.m.5 views

GHSA-CHGR-C6PX-7XPP PyO3 has a missing `Sync` bound on `PyCFunction::new_closure` closures

PyCFunction::newclosure and the temporary newclosurebound complement in the 0.21–0.22 series required the supplied closure to be Send + 'static but not Sync. The resulting PyCFunction is a Python callable that can be invoked from any Python thread, which means the closure may be called concurrent...

6.3CVSS5.7AI score
Exploits0References4
OSV
OSV
added 2026/06/11 12:0 p.m.25 views

RUSTSEC-2026-0177 Missing `Sync` bound on `PyCFunction::new_closure` closures

PyCFunction::newclosure and the temporary newclosurebound complement in the 0.21–0.22 series required the supplied closure to be Send + 'static but not Sync. The resulting PyCFunction is a Python callable that can be invoked from any Python thread, which means the closure may be called concurrent...

5.5AI score
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-1792

Malware in sbrugna...

8.1CVSS7.9AI score0.00766EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 4:39 p.m.16 views

CVE-2020-36442

An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait...

8.1CVSS6.9AI score0.00766EPSS
Exploits0
OSV
OSV
added 2021/08/25 8:49 p.m.15 views

GHSA-4HJG-CX88-G9F9 Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.3AI score0.00374EPSS
Exploits1References4
GitLab Advisory Database
GitLab Advisory Database
added 2021/08/25 12:0 a.m.4 views

Data race in abox

Affected versions of this crate implements Send/Sync for AtomicBox without requiring T: Send/T: Sync. This allows to create data races to T: !Sync and send T: !Send to another thread. Such behavior breaks the compile-time thread safety guarantees of Rust, and allows users to incur undefined...

8.1CVSS7.1AI score0.00766EPSS
Exploits0References8Affected Software1
NVD
NVD
added 2021/08/08 6:15 a.m.18 views

CVE-2020-36442

An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait...

8.1CVSS0.00766EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/08/08 5:17 a.m.12 views

CVE-2020-36442

An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait...

8.1AI score0.00766EPSS
Exploits0References2
OSV
OSV
added 2021/01/26 6:15 p.m.2 views

CVE-2020-36215

An issue was discovered in the hashconsing crate before 1.1.0 for Rust. Because HConsed does not have bounds on its Send trait or Sync trait, memory corruption can occur...

7.5CVSS7.1AI score0.0136EPSS
Exploits1References1
OSV
OSV
added 2021/01/26 6:15 p.m.3 views

CVE-2020-36217

An issue was discovered in the mayqueue crate through 2020-11-10 for Rust. Because Queue does not have bounds on its Send trait or Sync trait, memory corruption can occur...

5.9CVSS6.2AI score0.01112EPSS
Exploits1References1
OSV
OSV
added 2021/01/26 6:15 p.m.3 views

CVE-2020-36204

An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur...

4.7CVSS5.8AI score0.00332EPSS
Exploits1References1
Rows per page
Query Builder