https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:31:42.922723+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-36472 CVE-2020-36472 2026-10-16T14:31:42.925510+00:00

An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander<EI> types that they contain.

 https://cve.radiocsirt.org/vuln/ghsa-rmff-f8w9-c9rm GHSA-rmff-f8w9-c9rm — Data races in max7301 2026-10-16T14:31:42.925557+00:00

Affected: crates.io: max7301

The `ImmediateIO` and `TransactionalIO` types implement `Sync` for all contained `Expander<EI>` types regardless of if the `Expander` itself is safe to use across threads.

As the `IO` types allow retrieving the `Expander`, this can lead to non-thread safe types being sent across threads as part of the `Expander` leading to data races.