https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T15:56:40.796636+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36438 CVE-2020-36438 2026-10-18T15:56:40.800072+00:00

An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.

 https://cve.radiocsirt.org/vuln/ghsa-fg42-vwxx-xx5j GHSA-fg42-vwxx-xx5j — Data race in tiny_future 2026-10-18T15:56:40.800132+00:00

Affected: crates.io: tiny_future

tiny_future contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was corrected in commit `c791919` by adding trait bounds to Future's Send and Sync.