Files
advisory-db/crates/static_cell/RUSTSEC-2025-0045.md
2025-07-17 16:38:11 +02:00

715 B

[advisory]
id = "RUSTSEC-2025-0045"
package = "static_cell"
date = "2025-07-17"
url = "https://github.com/embassy-rs/static-cell/issues/19"
informational = "unsound"
categories = ["memory-exposure", "memory-corruption"]
keywords = ["send", "thread-safety"]

[versions]
patched = [">= 2.1.1"]
unaffected = ["<= 2.0.0"]

[affected]

[affected.functions]
"static_cell::ConstStaticCell::new" = ["= 2.1.0"]

ConstStaticCell could have been used to pass non-Send values to another thread

ConstStaticCell<T> could have been used to pass non-Send values to another thread, because T was not required to be Send while ConstStaticCell is Send.

This was corrected by introducing a T: Send bound.