tocsin

CVE-2026-46690

1 advisory.

crates.io/unbounded-spsc CVE-2026-46690: medium 5.8, EPSS 0.12%

unbounded-spsc: Sender::send pointer-as-value transmute causes OOB read and fake-Arc drop under TX/RX race

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-0.2.0

Fixed versions

No fixed version in the source.

Sources

CVE-2026-46690 · published · modified · JSON