https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T13:38:07.126620+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-78753 cnvd-2021-78753 2026-10-18T13:38:07.152881+00:00 cnvd-2021-78753 https://cve.radiocsirt.org/vuln/euvd-2026-48242 EUVD-2026-48242 2026-10-18T13:38:07.152925+00:00 EUVD-2026-48242 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36442 fkie_cve-2020-36442 2026-10-18T13:38:07.152940+00:00

An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait.

 https://cve.radiocsirt.org/vuln/ghsa-m7w4-8wp8-m2xq GHSA-m7w4-8wp8-m2xq — Data races in beef 2026-10-18T13:38:07.152971+00:00

Affected: crates.io: beef

An issue was discovered in the beef crate before 0.5.0 for Rust. Affected versions of this crate did not have a `T: Sync` bound in the `Send` impl for `Cow<'_, T, U>`. This allows users to create data races by making `Cow` contain types that are (Send && !Sync) like `Cell<_>` or `RefCell<_>`.

Such data races can lead to memory corruption.

The flaw was corrected in commit d1c7658 by adding trait bounds `T: Sync` and `T::Owned: Send` to the `Send` impl for `Cow<'_, T, U>`.

 https://cve.radiocsirt.org/vuln/gsd-2020-36442 gsd-2020-36442 2026-10-18T13:38:07.153003+00:00 gsd-2020-36442 https://cve.radiocsirt.org/vuln/rustsec-2020-0122 RUSTSEC-2020-0122 — beef::Cow lacks a Sync bound on its Send trait allowing for data races 2026-10-18T13:38:07.153015+00:00

Affected: crates.io: beef

Affected versions of this crate did not have a `T: Sync` bound in the `Send` impl for `Cow<'_, T, U>`. This allows users to create data races by making `Cow` contain types that are (Send && !Sync) like `Cell<_>` or `RefCell<_>`.

Such data races can lead to memory corruption.

The flaw was corrected in commit d1c7658 by adding trait bounds `T: Sync` and `T::Owned: Send` to the `Send` impl for `Cow<'_, T, U>`.