crates.io/abox CVE-2020-36441: high 8.1, EPSS 0.77%

Data race in abox

Action: Upgrade abox to 0.4.1 or later.

cargo update -p abox --precise 0.4.1

Affected

Fixed versions

Sources

• osv: GHSA-r626-fc64-3q28
• https://nvd.nist.gov/vuln/detail/CVE-2020-36441
• https://github.com/SonicFrog/abox/issues/1
• https://github.com/SonicFrog/abox/pull/2
• https://github.com/SonicFrog/abox/commit/34c2b9e
• https://github.com/SonicFrog/abox
• https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/abox/RUSTSEC-2020-0121.md
• https://rustsec.org/advisories/RUSTSEC-2020-0121.html

CVE-2020-36441 · published 2021-08-25T20:59:06Z · modified 2023-11-08T04:03:45.024840Z · JSON