What is GHSA-jf43-3v8j-qwwr?

GHSA-jf43-3v8j-qwwr is a security advisory published by GitHub Security Advisories with High severity. Data races in multiqueue

Why does GHSA-jf43-3v8j-qwwr have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

What is the CVSS v3 score of GHSA-jf43-3v8j-qwwr?

GHSA-jf43-3v8j-qwwr has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-jf43-3v8j-qwwr?

GHSA-jf43-3v8j-qwwr affects 1 product, including: rust/multiqueue:\u003c= 0.3.2.

GHSA-jf43-3v8j-qwwrHighCVSS 8.1Disclosed before NVD

Data races in multiqueue

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

June 13, 2023

📋 Description

Affected versions of multiqueue unconditionally implemented Send for types used in queue implementations (InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, FutInnerRecv<RW, T>). This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior.

🎯 Affected products1

rust/multiqueue:<= 0.3.2

🔗 References (3)

https://github.com/schets/multiqueue/issues/31
https://rustsec.org/advisories/RUSTSEC-2020-0143.html
https://github.com/advisories/GHSA-jf43-3v8j-qwwr