https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:32:07.694401+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36462 CVE-2020-36462 2026-10-15T07:32:07.728448+00:00

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0142 RUSTSEC-2020-0142 — Send bound needed on T (for Send impl of `Bucket2`) 2026-10-15T07:32:07.728515+00:00

Affected: crates.io: syncpool

Affected versions of this crate unconditionally implements `Send` for `Bucket2`. This allows sending non-Send types to other threads.

This can lead to data races when non Send types like `Cell<T>` or `Rc<T>` are contained inside `Bucket2` and sent across thread boundaries. The data races can potentially lead to memory corruption (as demonstrated in the PoC from the original report issue).

The flaw was corrected in commit 15b2828 by adding a `T: Send` bound to the `Send` impl of `Bucket2<T>`.