crates.io/reffers CVE-2020-36203: medium 4.7, EPSS 0.24%

Unsound: can make `ARefss` contain a !Send, !Sync object.

Action: Upgrade reffers to 0.6.1 or later.

cargo update -p reffers --precise 0.6.1

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0094
• https://crates.io/crates/reffers
• https://rustsec.org/advisories/RUSTSEC-2020-0094.html
• https://github.com/diwic/reffers-rs/issues/7

CVE-2020-36203 · published 2020-12-01T12:00:00Z · modified 2023-11-08T04:03:41.295805Z · JSON