{"id":"GHSA-83r8-p8v6-6gfm","summary":"Slock\u003cT\u003e allows sending non-Send types across thread boundaries","details":"`Slock\u003cT\u003e` unconditionally implements `Send`/`Sync`.\n\nAffected versions of this crate allows sending non-Send types to other threads,\nwhich can lead to data races and memory corruption due to the data race.\n","aliases":["CVE-2020-36455","GHSA-mc36-5m36-hjh5","RUSTSEC-2020-0135"],"modified":"2023-11-08T04:03:45.889311Z","published":"2021-08-25T21:00:20Z","database_specific":{"cwe_ids":["CWE-362"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2021-08-06T17:28:42Z","nvd_published_at":null},"references":[{"type":"WEB","url":"https://github.com/BrokenLamp/slock-rs/issues/2"},{"type":"PACKAGE","url":"https://github.com/BrokenLamp/slock-rs"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2020-0135.html"}],"affected":[{"package":{"name":"slock","ecosystem":"crates.io","purl":"pkg:cargo/slock"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.2.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/08/GHSA-83r8-p8v6-6gfm/GHSA-83r8-p8v6-6gfm.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}