{"id":"RUSTSEC-2023-0031","summary":"Initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers","details":"`Once::try_call_once` is unsound if invoked more than once concurrently and any call fails to initialise successfully.","aliases":["GHSA-2qv5-7mw5-j3cg"],"modified":"2023-11-08T04:14:12.609447Z","published":"2023-03-31T12:00:00Z","database_specific":{"license":"CC0-1.0"},"references":[{"type":"PACKAGE","url":"https://crates.io/crates/spin"},{"type":"ADVISORY","url":"https://rustsec.org/advisories/RUSTSEC-2023-0031.html"},{"type":"REPORT","url":"https://github.com/mvdnes/spin-rs/issues/148"}],"affected":[{"package":{"name":"spin","ecosystem":"crates.io","purl":"pkg:cargo/spin"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0.9.3"},{"fixed":"0.9.8"}]}],"ecosystem_specific":{"affected_functions":null,"affects":{"arch":[],"functions":[],"os":[]}},"database_specific":{"categories":[],"cvss":null,"informational":"unsound","source":"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2023-0031.json"}}],"schema_version":"1.7.3"}