MEDIUM5.9
GHSA-69vj-xx27-g45w
Data race in eventio
Details
Input<R> implements Send without requiring R: Send.
Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption.
The flaw was corrected in version 0.5.1 by adding R: Send bound to the Send impl of Input<R>.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/eventio
Introduced in:
0Fixed in: 0.5.1Upgrade eventio to 0.5.1 or newer (ecosystem crates.io).