Vulnerabilities

TI-2022-07691 CVE-2022-23639 · GHSA-qc84-gqf4-9926

Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils

HIGH 70

crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01229 Published 2022-02-15 Fixed in 0.8.7 CWE-362

TI-2021-12475 CVE-2021-32810 · GHSA-pqqp-xmhj-wgcw

MEDIUM 46

crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01907 Published 2021-08-02 Partial fix · 0.7.4, 0.8.1 CWE-362

TI-2020-12026 CVE-2020-15254 · GHSA-v5m7-53cv-f3hx

MEDIUM 47

Crossbeam is a set of tools for concurrent programming.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02701 Published 2020-10-16 Fixed in 0.4.4 CWE-119

TI-2018-14958 CVE-2018-20996 · GHSA-c3cw-c387-pj65

MEDIUM 46

An issue was discovered in the crossbeam crate before 0.4.1 for Rust.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01744 Published 2019-08-26 Fixed in 0.4.1 CWE-415