← All advisories

Medium severity5.3NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2021-25901

CVE-2021-25901

Description

An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
lazy-initcrates.io	< 0.4.0	0.4.0

Affected products

3

Lazy Init Project/Lazy Init
cpe:2.3:a:lazy-init_project:lazy-init:*:*:*:*:*:rust:*:*
Range: <=0.4.0
Rust/lazy-initdescription
ghsa-coords
pkg:cargo/lazy-init
Range: < 0.4.0

Patches

Vulnerability mechanics

References

4

rustsec.org/advisories/RUSTSEC-2021-0004.htmlnvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-w47j-hqpf-qw9wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-25901ghsaADVISORY
github.com/khuey/lazy-init/issues/9ghsaWEB

News mentions

0

No linked articles in our index yet.