CVE-2020-36217

crates.io/may_queue CVE-2020-36217: medium 5.9

Data race in may_queue

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-pphf-f93w-gc84
• https://nvd.nist.gov/vuln/detail/CVE-2020-36217
• https://github.com/Xudong-Huang/may/issues/88
• https://github.com/Xudong-Huang/may
• https://rustsec.org/advisories/RUSTSEC-2020-0111.html

CVE-2020-36217 · published 2021-08-25T20:51:47Z · modified 2024-10-25T21:35:35Z · JSON

crates.io/may_queue CVE-2020-36217: medium 5.9

may_queue's Queue lacks Send/Sync bound for its Send/Sync trait.

Action: Upgrade may_queue to 0.1.8 or later.

cargo update -p may_queue --precise 0.1.8

Affected

Fixed versions

Sources

• osv: RUSTSEC-2020-0111
• https://crates.io/crates/may_queue
• https://rustsec.org/advisories/RUSTSEC-2020-0111.html
• https://github.com/Xudong-Huang/may/issues/88

CVE-2020-36217 · published 2020-11-10T12:00:00Z · modified 2024-10-25T18:45:36Z · JSON