Potential segfault in the time crate

Impact The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected...

@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2021-23337 via lodash-es (>=4.0.0, <=4.17.20)

lodash-es NPM version =4.0.0, =0.0.1-alpha.4, =0.1.10, =0.0.1, =0.0.2, =3.2.1, =3.2.1, =3.2.1, =0.0.1, =3.2.1, =3.2.1, =0.1.0, =0.3.14, =0.4.42 and more Source cves: CVE-2021-23337 Source advisory: SNYK:JS-LODASHES-2434284...

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +54200 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1, <=4.18.1)

lodash.template NPM version =2.2.1, =1.0.1, =0.0.2, =0.0.10 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19158 more potentially affected by CVE-2021-23337 via lodash (>=4.0.0, <=4.17.20)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.0.2, =0.1.0, =0.1.0, =1.0.23, =4.11.0, =4.11.20 and more Source cves: CVE-2021-23337 Source advisory: SNYK:JS-LODASH-1040724...

monitoros (>=0.0.1, <=0.0.3), pk-app-pkgmgt (>=0.0.1, <=0.0.2) potentially affected by CVE-2020-7775 via freediskspace (0.1.2)

freediskspace NPM version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on freediskspace and may be impacted: - monitoros =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-7775 Source advisory: SNYK:JS-FREEDISKSPACE-1040716...

@boyuai/fe-base (>=0.37.0, <=0.42.6), @boyuai/markdown (>=0.1.0, <=0.6.0) +29 more potentially affected by unknown CVE via markdown-it-texmath (>=0.4.7, <=0.8.0)

markdown-it-texmath NPM version =0.4.7, =0.37.0, =0.1.0, =0.1.1, =0.2.1, =0.0.1, =0.0.7, =1.0.0, =2.15.3-alpha.0, =1.1.0, =0.1.0, =0.1.0, =0.6.0, =1.3.5 - @navanjr/vuetify-markdown-editor 1.0.0 - @suehok/vuetify-markdown-editor 3.3.4 and more Source cves: unknown CVE Source advisory:...

ruspiro-boot (>=0.3.0, <=0.3.2), ruspiro-console (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2020-36435 via ruspiro-singleton (>=0.0.2, <=0.3.1)

ruspiro-singleton CARGO version =0.0.2, =0.3.0, =0.0.2, =0.0.2, =0.3.0, =0.1.0, =0.0.2, =0.4.0, =0.0.2, =0.3.1 Source cves: CVE-2020-36435 Source advisory: OSV:RUSTSEC-2020-0115...

actyx_sdk (0.3.0), actyxos_sdk (>=0.5.1, <=0.6.0) +40 more potentially affected by CVE-2020-36471 via generator (0.6.25)

generator CARGO version 0.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on generator and may be impacted: - actyxsdk 0.3.0 - actyxossdk =0.5.1, =0.1.0, =0.2.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.0.1, =0.2.11, =0.7.0, =0.5.0, =0.9.2, =0.8.2, =0.1.0,...

@decentralized-identity/sidetree (>=0.10.0-unstable.0042dcd, <=1.0.1), spec-up (>=0.9.0, <=0.10.1) +2 more potentially affected by unknown CVE via markdown-it-prism (>=2.0.3, <=2.1.2)

markdown-it-prism NPM version =2.0.3, =0.10.0-unstable.0042dcd, =0.9.0, =1.1.11, =0.10.1, =0.11.1-preview.1 Source cves: unknown CVE Source advisory: SNYK:JS-MARKDOWNITPRISM-1040462...

@wulechuan/generate-html-via-markdown (>=3.0.0, <=3.0.1), norska (>=0.6.0, <=0.16.0) +3 more potentially affected by CVE-2020-7773 via markdown-it-highlightjs (>=3.0.0, <=3.3.0)

markdown-it-highlightjs NPM version =3.0.0, =3.0.0, =0.6.0, =0.6.0, =0.2.2, =0.2.4 Source cves: CVE-2020-7773 Source advisory: SNYK:JS-MARKDOWNITHIGHLIGHTJS-1040461...

canonical (>=0.4.1, <=0.5.3), canonical_collections (0.4.0) +11 more potentially affected by CVE-2020-36469 via appendix (0.2.2)

appendix CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on appendix and may be impacted: - canonical =0.4.1, =0.4.0, =0.4.3, =0.4.0, =0.6.0, =0.1.0, =0.18.0, =0.11.0, =0.4.0, =0.6.0, =0.7.0 - rusk-abi 0.7.0 - rusk-vm 0.12.0-rc.0 Sourc...

term-handler (0.1.0) potentially affected by CVE-2020-36446 via signal-simple (0.1.1)

signal-simple CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signal-simple and may be impacted: - term-handler 0.1.0 Source cves: CVE-2020-36446 Source advisory: OSV:RUSTSEC-2020-0126...

alkyne (0.1.0), dioxus-core (0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0, <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

rustracts (0.2.0) potentially affected by CVE-2020-36454 via parc (1.0.1)

parc CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on parc and may be impacted: - rustracts 0.2.0 Source cves: CVE-2020-36454 Source advisory: OSV:RUSTSEC-2020-0134...

ate (>=1.0.0, <=1.3.0), ate-auth (>=1.7.0, <=1.9.0) +8 more potentially affected by CVE-2020-36451 via rcu_cell (>=0.1.12, <=1.2.1)

rcucell CARGO version =0.1.12, =1.0.0, =1.7.0, =1.0.0, =1.6.0, =1.8.0, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =1.3.0 Source cves: CVE-2020-36451 Source advisory: OSV:RUSTSEC-2020-0131...

kanidm (>=0.1.0, <=0.1.1), kanidm_client (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-35928 via concread (0.1.20)

concread CARGO version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on concread and may be impacted: - kanidm =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2020-35928 Source advisory: OSV:RUSTSEC-2020-0092...

abstract-ns (0.1.0), accumulator (0.3.0) +111 more potentially affected by CVE-2020-35921 via miow (0.1.5)

miow CARGO version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on miow and may be impacted: - abstract-ns 0.1.0 - accumulator 0.3.0 - asio 0.1.0 - bipdht =0.1.0, =0.1.1, =0.1.0, =0.2.0, =0.1.0, =0.15.0, =0.1.1, =0.1.0, =0.6.0, =0.6.2 and more...

garbo (>=0.1.0, <=0.2.0) potentially affected by CVE-2020-36450 via bunch (0.1.0)

bunch CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bunch and may be impacted: - garbo =0.1.0, =0.2.0 Source cves: CVE-2020-36450 Source advisory: OSV:RUSTSEC-2020-0130...

3nit-utils (0.24.0), @8base/api-cli (>=0.0.1, <=0.1.0) +346 more potentially affected by CVE-2020-7769 via nodemailer (>=6.0.0, <=6.4.15)

nodemailer NPM version =6.0.0, =0.0.1, =1.16.0, =1.16.0, =1.16.1, =1.16.0, =1.16.0, =1.16.7, =1.16.0, =1.16.0, =1.16.0, =1.16.1, =1.2.1, =0.16.9, =0.17.0 - @agnostack/sync-moltin-to-shipstation 1.0.0 and more Source cves: CVE-2020-7769 Source advisory: SNYK:JS-NODEMAILER-1038834...

abra (0.0.1), abrute (>=0.1.7, <=0.1.9) +712 more potentially affected by CVE-2020-26235 via chrono (>=0.2.16, <=0.4.19)

chrono CARGO version =0.2.16, =0.1.7, =0.1.0, =0.1.0, =0.0.11, =0.7.0, =1.1.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0159...