mirror of
https://github.com/rustsec/advisory-db.git
synced 2025-12-27 01:54:07 -05:00
715 B
715 B
[advisory]
id = "RUSTSEC-2025-0045"
package = "static_cell"
date = "2025-07-17"
url = "https://github.com/embassy-rs/static-cell/issues/19"
informational = "unsound"
categories = ["memory-exposure", "memory-corruption"]
keywords = ["send", "thread-safety"]
[versions]
patched = [">= 2.1.1"]
unaffected = ["<= 2.0.0"]
[affected]
[affected.functions]
"static_cell::ConstStaticCell::new" = ["= 2.1.0"]
ConstStaticCell could have been used to pass non-Send values to another thread
ConstStaticCell<T> could have been used to pass non-Send values to another thread, because T was not required to be Send while ConstStaticCell is Send.
This was corrected by introducing a T: Send bound.