https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T03:28:11.320867+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36439 CVE-2020-36439 2026-10-18T03:28:11.322850+00:00

An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket<T> and WriteTicket<T>.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0119 RUSTSEC-2020-0119 — ReadTicket and WriteTicket should only be sendable when T is Send 2026-10-18T03:28:11.322900+00:00

Affected: crates.io: ticketed_lock

Affected versions of this crate unconditionally implemented `Send` for `ReadTicket<T>` & `WriteTicket<T>`. This allows to send non-Send `T` to other threads.

This can allows creating data races by cloning types with internal mutability and sending them to other threads (as `T` of `ReadTicket<T>`/`WriteTicket<T>`). Such data races can cause memory corruption or other undefined behavior.

The flaw was corrected in commit a986a93 by adding `T: Send` bounds to `Send` impls of `ReadTicket<T>`/`WriteTicket<T>`.