crates.io/hashconsing CVE-2020-36215: high 7.5, EPSS 1.38%
hashconsing's HConsed lacks Send/Sync bound for its Send/Sync trait.
Action: Upgrade hashconsing to 1.1.0 or later.
cargo update -p hashconsing --precise 1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: RUSTSEC-2020-0107
- https://crates.io/crates/hashconsing
- https://rustsec.org/advisories/RUSTSEC-2020-0107.html
- https://github.com/AdrienChampion/hashconsing/issues/1
CVE-2020-36215 · published · modified · JSON