crates.io/beef CVE-2020-36442: high 8.1, EPSS 0.77%

beef::Cow lacks a Sync bound on its Send trait allowing for data races

Action: Upgrade beef to 0.5.0 or later.

cargo update -p beef --precise 0.5.0

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0122
• https://crates.io/crates/beef
• https://rustsec.org/advisories/RUSTSEC-2020-0122.html
• https://github.com/maciejhirsz/beef/issues/37

CVE-2020-36442 · published 2020-10-28T12:00:00Z · modified 2023-11-08T04:03:45.086282Z · JSON