VDB
Sign up
MEDIUM5.9

GHSA-3hj2-hh36-hv9v

Data race in va-ts

Details

In the affected versions of this crate, Demuxer<T> unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from data race. The flaw was corrected in commit `0562cbf` by adding a T: Send bound to the Send impl for Demuxer<T>.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/va-ts
Introduced in: 0Fixed in: 0.0.4

Upgrade va-ts to 0.0.4 or newer (ecosystem crates.io).

References