https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T16:53:22.128439+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36450 CVE-2020-36450 2026-10-18T16:53:22.129983+00:00

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch<T>.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0130 RUSTSEC-2020-0130 — Bunch<T> unconditionally implements Send/Sync 2026-10-18T16:53:22.130029+00:00

Affected: crates.io: bunch

Affected versions of this crate unconditionally implements `Send`/`Sync` for `Bunch<T>`. This allows users to insert `T: !Sync` to `Bunch<T>`. It is possible to create a data race to a `T: !Sync` by invoking the `Bunch::get()` API (which returns `&T`) from multiple threads. It is also possible to send `T: !Send` to other threads by inserting `T` inside `Bunch<T>` and sending `Bunch<T>` to another thread, allowing to create a data race by inserting types like `T = Rc<_>`.

Such data races can lead to memory corruption.