kanidm (>=0.1.0, <=0.1.1), kanidm_client (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-35928 via concread (0.1.20)

concread CARGO version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on concread and may be impacted: - kanidm =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2020-35928 Source advisory: OSV:GHSA-4XJ5-VV9X-63JP...

CVE-2020-35928

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...

CVE-2020-35928

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...

CVE-2020-35928

Concread crate (Rust) before 0.2.6 exposes a data race in ARCache when non-Send/Sync types are used. Root cause: ARCache implementation unbound by Send/Sync, allowing unsafe concurrent access. The issue was fixed in 0.2.6 by adding K: Send + Sync and V: Send + Sync bounds to the affected Send/Syn...

kanidm (>=0.1.0, <=0.1.1), kanidm_client (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-35928 via concread (0.1.20)

concread CARGO version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on concread and may be impacted: - kanidm =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2020-35928 Source advisory: OSV:RUSTSEC-2020-0092...