From f324f2d97c0515f4cc673b02eb54899295c58826 Mon Sep 17 00:00:00 2001 From: Ammar Askar Date: Mon, 21 Sep 2020 11:29:50 -0700 Subject: [PATCH] Add advisory for atom crate --- crates/atom/RUSTSEC-0000-0000.toml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 crates/atom/RUSTSEC-0000-0000.toml diff --git a/crates/atom/RUSTSEC-0000-0000.toml b/crates/atom/RUSTSEC-0000-0000.toml new file mode 100644 index 0000000..3fa58a2 --- /dev/null +++ b/crates/atom/RUSTSEC-0000-0000.toml @@ -0,0 +1,15 @@ +[advisory] +id = "RUSTSEC-0000-0000" +package = "atom" +date = "2020-09-21" +informational = "unsound" +title = "Unsafe Send implementation in Atom allows data races" +url = "https://github.com/slide-rs/atom/issues/13" +description = """ +The `atom` crate contains a security issue revolving around its implementation +of the Send trait. It incorrectly allows any arbitrary type to be sent across +threads potentially leading to use-after-free issues through memory races. +""" + +[versions] +patched = []