crates.io/inventory: medium
Inventory exposes reference to non-Sync data to an arbitrary thread
Action: Upgrade inventory to 0.2.0 or later.
cargo update -p inventory --precise 0.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0 | - |
Fixed versions
| 0.2.0 |
Sources
- osv: GHSA-36xm-35qq-795w
- https://github.com/dtolnay/inventory/pull/42
- https://github.com/dtolnay/inventory/commit/e1e347d2725b9c9dd4a70b63eb08532ca9687652
- https://github.com/dtolnay/inventory
- https://rustsec.org/advisories/RUSTSEC-2023-0058.html
published · modified · JSON