~ / search / GHSA-69vj-xx27-g45w

GHSA-69vj-xx27-g45w

Data race in eventio

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-36216

Packages

EcosystemPackageAffectedFixed in
crates.io eventio < 0.5.1 0.5.1

Details

As written in the advisory (Markdown source, shown as plain text).

Input<R> implements Send without requiring R: Send. Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption. The flaw was corrected in version 0.5.1 by adding R: Send bound to the Send impl of Input<R>.

References

External links from the advisory. They lead to third-party sites.