https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T01:05:14.270860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35874 CVE-2020-35874 2026-10-19T01:05:14.288205+00:00

An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.

 https://cve.radiocsirt.org/vuln/ghsa-96w3-p368-4h8c GHSA-96w3-p368-4h8c — Use after free in internment 2026-10-19T01:05:14.288254+00:00

Affected: crates.io: internment

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory.

This was fixed by serializing access to an interned object while it is being deallocated.

Versions prior to 0.3.12 used stronger locking which avoided the problem.