OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
460ac8be0db4e17f517287b16a024dec0ba617e9
advisory-db/crates/im/RUSTSEC-2020-0096.md
Yechan Bae b724f12a5b Update CVE numbers (#777) 
* Update CVE numbers

* Fix RUSTSEC-2020-0093

* Add another alias for async-h1 crate
2021-02-25 20:00:25 -05:00

572 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0096"
package = "im"
aliases = ["CVE-2020-36204"]
date = "2020-11-09"
url = "https://github.com/bodil/im-rs/issues/157"
categories = ["thread-safety"]
informational = "unsound"

[versions]
patched = []
unaffected = ["< 12.0.0"]

TreeFocus lacks bounds on its Send and Sync traits

Affected versions of im contains TreeFocus that unconditionally implements Send and Sync.

This allows a data race in safe Rust code if TreeFocus is extracted from Focus type. Typical users that only use Focus type are not affected.