bodil/im-rs · Security
Data races in im
- GHSA ID
- GHSA-q9h2-4xhf-23xx
- CVE ID
- CVE-2020-36204
- Severity
- medium
- Published
- Updated
- CVSS
- 4.7 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 4.7 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.
CWEs
- CWE-662 · Improper Synchronization
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-36204 ↗
- https://github.com/bodil/im-rs/issues/157 ↗
- https://rustsec.org/advisories/RUSTSEC-2020-0096.html ↗
- https://github.com/bodil/im-rs/pull/158 ↗
- https://github.com/bodil/im-rs/releases/tag/v15.1.0 ↗
- https://github.com/bodil/im-rs/commit/0b3a7b228b0fe70446393f55c8b893f349f3f6bd ↗
- https://github.com/advisories/GHSA-q9h2-4xhf-23xx ↗