HIGH8.1
GHSA-rpxm-vmr7-5f5f
Data races in convec
Details
Affected versions of this crate unconditionally implement Send/Sync for `ConVec<T>`. This allows users to insert `T` that is not Send or not Sync.
This allows users to create data races by using non-Send types like `Arc<Cell<_>>` or `Rc<_>` as `T` in `ConVec<T>`. It is also possible to create data races by using types like `Cell<_>` or `RefCell<_>` as `T` (types that are `Send` but not `Sync`). Such data races can lead to memory corruption.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/convec
Introduced in:
0No fixed version published yet for convec. Pin to a known-safe version or switch to an alternative.