crates.io package

internment

pkg:cargo/internment

Malware

2 malicious versions on record

One or more versions of this package have been flagged as containing malicious code. Audit any system that installed an affected version.

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2021-28037	Cri	9.8		< 0.4.2	0.4.2	Mar 5, 2021	An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern.
CVE-2020-35874	Hig	8.1		>= 0.3.12, < 0.4.0	0.4.0	Dec 31, 2020	An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.

CVE-2021-28037CriMar 5, 2021
affected < 0.4.2fixed 0.4.2
An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern.
CVE-2020-35874HigDec 31, 2020
affected >= 0.3.12, < 0.4.0fixed 0.4.0
An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.