{"ecosystem":"cargo","package":"lock_api","version":null,"bugs":[{"id":4543,"ecosystem":"cargo","package_name":"lock_api","affected_version":"0.0.0-0","fixed_version":"0.4.2","bug_id":"osv:RUSTSEC-2020-0070","title":"Some lock_api lock guard objects can cause data races","description":"Affected versions of lock_api had unsound implementations of the `Send` or\n`Sync` traits for some guard objects, namely:\n\n* MappedMutexGuard\n* MappedRwLockReadGuard\n* MappedRwLockWriteGuard\n* RwLockReadGuard\n* RwLockWriteGuard\n\nThese guards could allow data races through types that are not safe to `Send`\nacross thread boundaries in safe Rust code.\n\nThis issue was fixed by changing the trait bounds on the `Mapped` guard types\nand removing the `Sync` trait for the `RwLock` guards.","severity":"medium","status":"fixed","source":"osv","source_url":"https://crates.io/crates/lock_api","labels":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914","GHSA-5wg8-7c9q-794v","GHSA-gmv4-vmx3-x9f3","GHSA-hj9h-wrgg-hgmx","GHSA-ppj3-7jw3-8vc4","GHSA-vh4p-6j7g-f4j9"],"created_at":"2026-04-26 03:01:17.063516+00:00","updated_at":"2026-04-26 03:01:17.063516+00:00"},{"id":4542,"ecosystem":"cargo","package_name":"lock_api","affected_version":null,"fixed_version":"0.4.2","bug_id":"osv:GHSA-vh4p-6j7g-f4j9","title":"Data races in lock_api","description":"An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness.","severity":"medium","status":"fixed","source":"osv","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35911","labels":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914","GHSA-5wg8-7c9q-794v","GHSA-gmv4-vmx3-x9f3","GHSA-hj9h-wrgg-hgmx","GHSA-ppj3-7jw3-8vc4","RUSTSEC-2020-0070"],"created_at":"2026-04-26 03:01:17.060836+00:00","updated_at":"2026-04-26 03:01:17.060836+00:00"},{"id":4541,"ecosystem":"cargo","package_name":"lock_api","affected_version":null,"fixed_version":"0.4.2","bug_id":"osv:GHSA-ppj3-7jw3-8vc4","title":"Data races in lock_api","description":"An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness.","severity":"medium","status":"fixed","source":"osv","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35910","labels":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914","GHSA-5wg8-7c9q-794v","GHSA-gmv4-vmx3-x9f3","GHSA-hj9h-wrgg-hgmx","GHSA-vh4p-6j7g-f4j9","RUSTSEC-2020-0070"],"created_at":"2026-04-26 03:01:17.058171+00:00","updated_at":"2026-04-26 03:01:17.058171+00:00"},{"id":4540,"ecosystem":"cargo","package_name":"lock_api","affected_version":null,"fixed_version":"0.4.2","bug_id":"osv:GHSA-hj9h-wrgg-hgmx","title":"Data races in lock_api","description":"An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness.","severity":"medium","status":"fixed","source":"osv","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35913","labels":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914","GHSA-5wg8-7c9q-794v","GHSA-gmv4-vmx3-x9f3","GHSA-ppj3-7jw3-8vc4","GHSA-vh4p-6j7g-f4j9","RUSTSEC-2020-0070"],"created_at":"2026-04-26 03:01:17.055499+00:00","updated_at":"2026-04-26 03:01:17.055499+00:00"},{"id":4539,"ecosystem":"cargo","package_name":"lock_api","affected_version":null,"fixed_version":"0.4.2","bug_id":"osv:GHSA-gmv4-vmx3-x9f3","title":"Data races in lock_api","description":"An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness.","severity":"medium","status":"fixed","source":"osv","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35914","labels":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914","GHSA-5wg8-7c9q-794v","GHSA-hj9h-wrgg-hgmx","GHSA-ppj3-7jw3-8vc4","GHSA-vh4p-6j7g-f4j9","RUSTSEC-2020-0070"],"created_at":"2026-04-26 03:01:17.052816+00:00","updated_at":"2026-04-26 03:01:17.052816+00:00"},{"id":4538,"ecosystem":"cargo","package_name":"lock_api","affected_version":null,"fixed_version":"0.4.2","bug_id":"osv:GHSA-5wg8-7c9q-794v","title":"Data races in lock_api","description":"An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness.","severity":"medium","status":"fixed","source":"osv","source_url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35912","labels":["CVE-2020-35910","CVE-2020-35911","CVE-2020-35912","CVE-2020-35913","CVE-2020-35914","GHSA-gmv4-vmx3-x9f3","GHSA-hj9h-wrgg-hgmx","GHSA-ppj3-7jw3-8vc4","GHSA-vh4p-6j7g-f4j9","RUSTSEC-2020-0070"],"created_at":"2026-04-26 03:01:17.041648+00:00","updated_at":"2026-04-26 03:01:17.041648+00:00"}],"total":6,"_cache":"hit"}