GHSA-69vj-xx27-g45wMediumCVSS 5.9

Data race in eventio

Published
August 25, 2021
Last Modified
June 13, 2023

🔗 CVE IDs covered (1)

CVE-2020-36216 →

📋 Description

Input implements Send without requiring R: Send.

Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption.

The flaw was corrected in version 0.5.1 by adding R: Send bound to the Send impl of Input.

🎯 Affected products1

  • rust/eventio:< 0.5.1

🔗 References (4)