In the affected versions of this crate, LockWeak unconditionally implemented Send with no trait bounds on T. LockWeak doesn't own T and only provides &T. This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races.
References:MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5djctM3Y0Yy1nZjM4
Data races in parc
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| cargo:parc | <= 1.0.1 | No known fixed version | |
Affected Version RangesAll affected versions1.0.0, 1.0.1 |
|||