In the affected versions of this crate, LockWeak<T> unconditionally implemented Send with no trait bounds on T. LockWeak<T> doesn't own T and only provides &T. This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races.
MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh3eGMtajk3ai04NGdm
Race condition in Parc
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| cargo:parc | <= 1.0.1 | No known fixed version | |
Affected Version RangesAll affected versions1.0.0, 1.0.1 |
|||