crates.io/im CVE-2020-36204: medium 4.7, EPSS 0.34%

TreeFocus lacks bounds on its Send and Sync traits

Action: Upgrade im to 15.1.0 or later.

cargo update -p im --precise 15.1.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0096
• https://crates.io/crates/im
• https://rustsec.org/advisories/RUSTSEC-2020-0096.html
• https://github.com/bodil/im-rs/issues/157

CVE-2020-36204 · published 2020-11-09T12:00:00Z · modified 2023-11-08T04:03:41.356226Z · JSON