CVE-2020-36204
2 advisories.
crates.io/im CVE-2020-36204: medium 4.7, EPSS 0.34%
Data races in im
Action: Upgrade im to 15.1.0 or later.
cargo update -p im --precise 15.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 15.1.0 | - |
Fixed versions
| 15.1.0 |
Sources
- osv: GHSA-q9h2-4xhf-23xx
- https://nvd.nist.gov/vuln/detail/CVE-2020-36204
- https://github.com/bodil/im-rs/issues/157
- https://github.com/bodil/im-rs/pull/158
- https://github.com/bodil/im-rs/commit/0b3a7b228b0fe70446393f55c8b893f349f3f6bd
- https://github.com/bodil/im-rs
- https://github.com/bodil/im-rs/releases/tag/v15.1.0
- https://rustsec.org/advisories/RUSTSEC-2020-0096.html
CVE-2020-36204 · published · modified · JSON
crates.io/im CVE-2020-36204: medium 4.7, EPSS 0.34%
TreeFocus lacks bounds on its Send and Sync traits
Action: Upgrade im to 15.1.0 or later.
cargo update -p im --precise 15.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 12.0.0 | 15.1.0 | - |
Fixed versions
| 15.1.0 |
Sources
- osv: RUSTSEC-2020-0096
- https://crates.io/crates/im
- https://rustsec.org/advisories/RUSTSEC-2020-0096.html
- https://github.com/bodil/im-rs/issues/157
CVE-2020-36204 · published · modified · JSON