crates.io/tiny_future CVE-2020-36438: high 8.1, EPSS 0.77%

Future<T> lacks bounds on Send and Sync.

Action: Upgrade tiny_future to 0.4.0 or later.

cargo update -p tiny_future --precise 0.4.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0118
• https://crates.io/crates/tiny_future
• https://rustsec.org/advisories/RUSTSEC-2020-0118.html
• https://github.com/KizzyCode/tiny_future/issues/1

CVE-2020-36438 · published 2020-12-08T12:00:00Z · modified 2023-11-08T04:03:44.842730Z · JSON