~ / search / GHSA-w47j-hqpf-qw9w

GHSA-w47j-hqpf-qw9w

Out of bounds read in lazy-init

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-25901

Packages

EcosystemPackageAffectedFixed in
crates.io lazy-init < 0.4.0 0.4.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race.

References

External links from the advisory. They lead to third-party sites.