{"id":"GHSA-mpg5-fvwp-42m2","summary":"Unsoundness in `dashmap` references","details":"Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock.\nThis causes undefined behavior and may result in a segfault.\n\nMore information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.\n","aliases":["RUSTSEC-2022-0002"],"modified":"2023-11-08T04:21:12.292742Z","published":"2022-06-16T23:52:24Z","database_specific":{"github_reviewed_at":"2022-06-16T23:52:24Z","nvd_published_at":null,"cwe_ids":[],"severity":"HIGH","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/xacrimon/dashmap/issues/167"},{"type":"PACKAGE","url":"https://github.com/xacrimon/dashmap"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2022-0002.html"}],"affected":[{"package":{"name":"dashmap","ecosystem":"crates.io","purl":"pkg:cargo/dashmap"},"ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.1.0"}]}],"versions":["5.0.0"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json"}}],"schema_version":"1.9.0"}