The World type in dces is marked as Send without bounds on its EntityStore and ComponentStore.
World
dces
Send
EntityStore
ComponentStore
This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races.
{ "license": "CC0-1.0" }
{ "affected_functions": null, "affects": { "arch": [], "functions": [], "os": [] } }
[ "memory-corruption", "thread-safety" ]
null
"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
"https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2020-0139.json"