HIGH7.0

GHSA-g489-xrw3-3v8w

Data races in aovec

Details

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/aovec

Introduced in: 0

No fixed version published yet for aovec. Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-36207[ADVISORY]
https://github.com/krl/aovec[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2020-0099.html[WEB]