crates.io/crossbeam-channel CVE-2020-15254, CVE-2020-35904: high 8.1, EPSS 2.70%

crossbeam-channel Undefined Behavior before v0.4.4

Action: Upgrade crossbeam-channel to 0.4.4 or later.

cargo update -p crossbeam-channel --precise 0.4.4

Affected

Fixed versions

Sources

• osv: GHSA-v5m7-53cv-f3hx
• https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx
• https://nvd.nist.gov/vuln/detail/CVE-2020-15254
• https://github.com/crossbeam-rs/crossbeam/issues/539
• https://github.com/RustSec/advisory-db/pull/425
• https://github.com/crossbeam-rs/crossbeam/pull/533
• https://github.com/crossbeam-rs/crossbeam
• https://rustsec.org/advisories/RUSTSEC-2020-0052.html

CVE-2020-15254, CVE-2020-35904 · published 2021-08-25T21:01:13Z · modified 2026-07-08T06:27:45.679651074Z · JSON