CVE-2020-35882

Name of the Vulnerable Software and Affected Versions rocket versions prior to 0.4.5

Description An issue in the rocket crate for Rust allows LocalRequest::clone to create more than one mutable reference to the same object, possibly causing a data race. The Clone trait implementation of LocalRequest reuses the pointer to the inner Request object, leading to data races in rare combinations of APIs when the original and cloned objects are modified simultaneously.

Recommendations For versions prior to 0.4.5, update to version 0.4.5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of LocalRequest::clone when modifying the original and cloned objects at the same time to minimize the risk of data races.