GitHub Advisoryadvisory · crates.io

GHSA-w47j-hqpf-qw9w Out of bounds read in lazy-init

MEDIUM Published 2021-08-25 Modified 2021-08-19 Official page ↗

Aliases: CVE-2021-25901
Ecosystem: crates.io
Packages: lazy-init
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses: CWE-125
Reviewed: 2021-08-19

Affected packages

• crates.io lazy-init: < 0.4.0 → fixed in 0.4.0

Description

An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race.

Related

Alias · CVE (1)

CVE-2021-25901 An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. vulnerability

Weakness · CWE (1)

CWE-125 Out-of-bounds Read weakness

References