advisory-db/crates/parc/RUSTSEC-2020-0134.md

[advisory]
id = "RUSTSEC-2020-0134"
package = "parc"
date = "2020-11-14"
url = "https://github.com/hyyking/rustracts/pull/6"
categories = ["memory-corruption"]

[versions]
patched = []

LockWeak<T> allows to create data race to T.

In the affected versions of this crate, LockWeak<T> unconditionally implemented Send with no trait bounds on T. LockWeak<T> doesn't own T and only provides &T.

This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races.