{"id":"RUSTSEC-2020-0087","summary":"TryMutex\u003cT\u003e allows sending non-Send type across threads","details":"Affected versions of this crate unconditionally implemented Sync trait for `TryMutex\u003cT\u003e` type.\n\nThis allows users to put non-Send `T` type in `TryMutex` and send it to another thread, which can cause a data race.\n\nThe flaw was corrected in the 0.3.0 release by adding `T: Send` bound for the Sync trait implementation.","aliases":["CVE-2020-35924","GHSA-64j8-7gp2-xjx5"],"modified":"2023-11-08T04:03:39.649741Z","published":"2020-11-17T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/try-mutex"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2020-0087.html"},{"type":"REPORT","url":"https://github.com/mpdn/try-mutex/issues/2"}],"affected":[{"package":{"name":"try-mutex","ecosystem":"crates.io","purl":"pkg:cargo/try-mutex"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.3.0"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"functions":[],"arch":[],"os":[]}},"database_specific":{"categories":["thread-safety"],"source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2020-0087.json","informational":null,"cvss":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}