https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:43:38.436535+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-38191 CVE-2021-38191 2026-10-04T23:43:38.438206+00:00

An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.

 https://cve.radiocsirt.org/vuln/ghsa-2grh-hm3w-w7hv GHSA-2grh-hm3w-w7hv — Race condition in tokio 2026-10-04T23:43:38.438252+00:00

Affected: crates.io: tokio

When aborting a task with JoinHandle::abort, the future is dropped in the thread calling abort if the task is not currently being executed. This is incorrect for tasks spawned on a LocalSet. This can easily result in race conditions as many projects use Rc or RefCell in their Tokio tasks for better performance.