HIGH8.1
GHSA-g78p-g85h-q6ww
Data races in cache
Details
An issue was discovered in the cache crate through 2020-11-24 for Rust. Affected versions of this crate unconditionally implement Send/Sync for `Cache<K>`. This allows users to insert `K` that is not Send or not Sync.
This allows users to create data races by using non-Send types like `Arc<Cell<T>>` or `Rc<T>` as `K` in `Cache<K>`. It is also possible to create data races by using types like `Cell<T>` or `RefCell<T>` (types that are `Send` but not `Sync`). Such data races can lead to memory corruption.
Are you affected?
Enter the version of the package you're using.
Affected packages
crates.io/cache
Introduced in:
0No fixed version published yet for cache. Pin to a known-safe version or switch to an alternative.