GHSA-q9h2-4xhf-23xx
Data races in im
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2020-36204
- https://github.com/bodil/im-rs/issues/157
- https://github.com/bodil/im-rs/pull/158
- https://github.com/bodil/im-rs/commit/0b3a7b228b0fe70446393f55c8b893f349f3f6bd
- https://github.com/bodil/im-rs
- https://github.com/bodil/im-rs/releases/tag/v15.1.0
- https://rustsec.org/advisories/RUSTSEC-2020-0096.html