GitHub Advisoryadvisory · crates.io

GHSA-wv4p-jp67-jr97 Data races in magnetic

MEDIUM Published 2021-08-25 Modified 2023-06-13 Official page ↗
Aliases
CVE-2020-35925
Ecosystem
crates.io
Packages
magnetic
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-362
Reviewed
2021-08-19

Affected packages

• crates.io magnetic: < 2.0.1 → fixed in 2.0.1

Description

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T: Send bound to affected Sync/Send trait implementations.

Related

Alias · CVE (1)

  • CVE-2020-35925 An issue was discovered in the magnetic crate before 2.0.1 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References