GHSA-mpg5-fvwp-42m2

Source

https://github.com/advisories/GHSA-mpg5-fvwp-42m2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-mpg5-fvwp-42m2

Aliases

RUSTSEC-2022-0002

Published

2022-06-16T23:52:24Z

Modified

2023-11-08T04:21:12Z

Summary

Unsoundness in `dashmap` references

Details

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-06-16T23:52:24Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}

References

Affected packages

crates.io / dashmap

Package

Name: dashmap; View open source insights on deps.dev
Purl: pkg:cargo/dashmap

Affected ranges

Type: SEMVER
Events: Introduced

5.0.0

Fixed

5.1.0

Affected versions

5.*

5.0.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json"