https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T10:13:33.903471+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-61404 cnvd-2021-61404 2026-10-16T10:13:33.923586+00:00 cnvd-2021-61404 https://cve.radiocsirt.org/vuln/euvd-2026-48256 EUVD-2026-48256 2026-10-16T10:13:33.923621+00:00 EUVD-2026-48256 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36472 fkie_cve-2020-36472 2026-10-16T10:13:33.923636+00:00

An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander<EI> types that they contain.

 https://cve.radiocsirt.org/vuln/ghsa-rmff-f8w9-c9rm GHSA-rmff-f8w9-c9rm — Data races in max7301 2026-10-16T10:13:33.923665+00:00

Affected: crates.io: max7301

The `ImmediateIO` and `TransactionalIO` types implement `Sync` for all contained `Expander<EI>` types regardless of if the `Expander` itself is safe to use across threads.

As the `IO` types allow retrieving the `Expander`, this can lead to non-thread safe types being sent across threads as part of the `Expander` leading to data races.

 https://cve.radiocsirt.org/vuln/gsd-2020-36472 gsd-2020-36472 2026-10-16T10:13:33.923690+00:00 gsd-2020-36472 https://cve.radiocsirt.org/vuln/rustsec-2020-0152 RUSTSEC-2020-0152 — ImmediateIO and TransactionalIO can cause data races 2026-10-16T10:13:33.923703+00:00

Affected: crates.io: max7301

The `ImmediateIO` and `TransactionalIO` types implement `Sync` for all contained `Expander<EI>` types regardless of if the `Expander` itself is safe to use across threads.

As the `IO` types allow retrieving the `Expander`, this can lead to non-thread safe types being sent across threads as part of the `Expander` leading to data races.