https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T19:34:49.233451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36460 CVE-2020-36460 2026-10-14T19:34:49.235126+00:00

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0140 RUSTSEC-2020-0140 — `Shared` can cause a data race 2026-10-14T19:34:49.235175+00:00

Affected: crates.io: model

`Shared` data structure in `model` crate implements `Send` and `Sync` traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust.

Users are advised to treat `Shared` as an unsafe type. It should not be used outside of the testing context, and care must be taken so that the testing code does not have a data race besides a race condition that is expected to be caught by the test.

Check [the Rustonomicon](https://doc.rust-lang.org/nomicon/races.html) for the difference between a data race and a general race condition.