Most recent entries from all

EUVD-2026-48023

2026-10-12T08:45:55.375572+00:00

EUVD-2026-48023

fkie_cve-2020-36220

2026-10-12T08:45:55.375599+00:00

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur.

GHSA-3hj2-hh36-hv9v — Data race in va-ts

2026-10-12T08:45:55.375628+00:00

Affected: crates.io: va-ts

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from data race. The flaw was corrected in commit `0562cbf` by adding a T: Send bound to the Send impl for Demuxer.

gsd-2020-36220

2026-10-12T08:45:55.375653+00:00

gsd-2020-36220

RUSTSEC-2020-0114 — `Demuxer` can carry non-Send types across thread boundaries

2026-10-12T08:45:55.375666+00:00

Affected: crates.io: va-ts

In the affected versions of this crate, `Demuxer` unconditionally implemented `Send` with no trait bounds on `T`.

This allows sending a non-Send type `T` across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from data race.

The flaw was corrected in commit 0562cbf by adding a `T: Send` bound to the `Send` impl for `Demuxer`.