crates.io/arc-swap CVE-2020-35711: high 7.5, EPSS 1.62%
Dangling reference in `access::Map` with Constant
Action: Upgrade arc-swap to 0.4.8 or later.
cargo update -p arc-swap --precise 0.4.8cargo update -p arc-swap --precise 1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.4.2 | 0.4.8 | - |
| 1.0.0 | 1.1.0 | - |
Fixed versions
| 0.4.8 | 1.1.0 |
Sources
- osv: GHSA-9pqx-g3jh-qpqq
- https://nvd.nist.gov/vuln/detail/CVE-2020-35711
- https://github.com/vorner/arc-swap/issues/45
- https://github.com/vorner/arc-swap
- https://rustsec.org/advisories/RUSTSEC-2020-0091.html
CVE-2020-35711 · published · modified · JSON