crates.io/syncpool CVE-2020-36462: high 8.1, EPSS 1.24%
Data race in syncpool
Action: Upgrade syncpool to 0.1.6 or later.
cargo update -p syncpool --precise 0.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.6 | - |
Fixed versions
| 0.1.6 |
Sources
- osv: GHSA-vp6r-mrq9-8f4h
- https://nvd.nist.gov/vuln/detail/CVE-2020-36462
- https://github.com/Chopinsky/byte_buffer/issues/2
- https://github.com/Chopinsky/byte_buffer/commit/15b282877d1e576de2b337d8162bbf43ed1a0f2d
- https://github.com/Chopinsky/byte_buffer/tree/master/syncpool
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/syncpool/RUSTSEC-2020-0142.md
- https://rustsec.org/advisories/RUSTSEC-2020-0142.html
CVE-2020-36462 · published · modified · JSON