GHSA-83r8-p8v6-6gfm: Slock<T> allows sending non-Send types across thread boundaries

August 25, 2021 (updated June 14, 2022)

Slock<T> unconditionally implements Send/Sync.

Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race.

References

github.com/BrokenLamp/slock-rs
github.com/BrokenLamp/slock-rs/issues/2
github.com/advisories/GHSA-83r8-p8v6-6gfm
rustsec.org/advisories/RUSTSEC-2020-0135.html

Detect and mitigate GHSA-83r8-p8v6-6gfm with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →