HIGH

GHSA-mpg5-fvwp-42m2

Unsoundness in `dashmap` references

Details

Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock. This causes undefined behavior and may result in a segfault.

More information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.

Are you affected?

Enter the version of the package you're using.

Affected packages

crates.io/dashmap

Introduced in: 5.0.0Fixed in: 5.1.0

Upgrade dashmap to 5.1.0 or newer (ecosystem crates.io).

References

https://github.com/xacrimon/dashmap/issues/167[WEB]
https://github.com/xacrimon/dashmap[PACKAGE]
https://rustsec.org/advisories/RUSTSEC-2022-0002.html[WEB]