GHSA-8q64-wrfr-q48c – model

Package

Manager: cargo
Name: model
Vulnerable Version: <0

Severity

Level: Medium

CVSS v3.1: N/A

CVSS v4.0: N/A

EPSS: N/A pctlN/A

Details

Data races in model `Shared` data structure in `model` crate implements `Send` and `Sync` traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat `Shared` as an unsafe type. It should not be used outside of the testing context, and care must be taken so that the testing code does not have a data race besides a race condition that is expected to be caught by the test. Check [the Rustonomicon](https://doc.rust-lang.org/nomicon/races.html) for the difference between a data race and a general race condition.

Metadata

Created: 2021-08-25T20:59:24Z
Modified: 2021-08-24T17:59:47Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-8q64-wrfr-q48c/GHSA-8q64-wrfr-q48c.json
CWE IDs: ["CWE-362"]
Alternative ID: N/A
Finding: N/A
Auto approve: 0