tocsin

crates.io/tokio CVE-2021-38191: unknown, EPSS 0.83%

Task dropped in wrong thread when aborting `LocalSet` task

Action: Upgrade tokio to 1.5.1 or later.

cargo update -p tokio --precise 1.5.1
cargo update -p tokio --precise 1.6.3
cargo update -p tokio --precise 1.7.2
cargo update -p tokio --precise 1.8.1

Affected

introducedfixedlast affected
0.3.01.5.1-
1.6.01.6.3-
1.7.01.7.2-
1.8.01.8.1-

Fixed versions

1.5.11.6.31.7.21.8.1

Sources

CVE-2021-38191 · published · modified · JSON