https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T23:03:04.365594+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35928 CVE-2020-35928 2026-10-16T23:03:04.367817+00:00

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0092 RUSTSEC-2020-0092 — Send/Sync bound needed on V in `impl Send/Sync for ARCache<K, V>` 2026-10-16T23:03:04.367867+00:00

Affected: crates.io: concread

Affected versions of this crate unconditionally implemented `Send`/`Sync` traits for `ARCache<K, V>` type.

This allows users to send/access types that do not implement `Send`/`Sync`, which can cause a data race.

The flaw was corrected in the 0.2.6 release by adding bounds `K: Send + Sync` & `V: Send + Sync` to affected `Send`/`Sync` trait implementations.