CVE-2020-36448

Name of the Vulnerable Software and Affected Versions cache crate through 2020-11-24

Description An issue in the cache crate allows users to insert types that are not Send or not Sync, such as Arc<Cell<T>> or Rc<T>, as K in Cache<K>. This can lead to data races, which can result in memory corruption. Additionally, using types like Cell<T> or RefCell<T> that are Send but not Sync can also create data races.

Recommendations For versions of the cache crate through 2020-11-24, consider restricting the use of Cache<K> to only Send and Sync types to minimize the risk of data races and memory corruption. As a temporary workaround, avoid using non-Send types like Arc<Cell<T>> or Rc<T> as K in Cache<K>, and refrain from using types like Cell<T> or RefCell<T> that are Send but not Sync.