Security Vulnerabilities - CVEs Published In August 2021
An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock<T> unconditionally implements Send and Sync.
CVSS Score
8.1
EPSS Score
0.005
Published
2021-08-08
An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell<T>, the Send trait lacks bounds on the contained type.
CVSS Score
8.1
EPSS Score
0.005
Published
2021-08-08
An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox<T> implements the Send and Sync traits for all types T.
CVSS Score
8.1
EPSS Score
0.005
Published
2021-08-08
An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementation of Sync with a trait bound of T: Send, E: Send.
CVSS Score
8.1
EPSS Score
0.003
Published
2021-08-08
An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore.
CVSS Score
8.1
EPSS Score
0.005
Published
2021-08-08
An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type.
CVSS Score
8.1
EPSS Score
0.004
Published
2021-08-08
An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock.
CVSS Score
8.1
EPSS Score
0.005
Published
2021-08-08
An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new().
CVSS Score
9.8
EPSS Score
0.004
Published
2021-08-08
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement.
CVSS Score
7.5
EPSS Score
0.002
Published
2021-08-08
An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free.
CVSS Score
9.8
EPSS Score
0.004
Published
2021-08-08