CVE-2020-36459

Name of the Vulnerable Software and Affected Versions dces crate versions through 2020-12-09

Description An issue was discovered in the dces crate where the World type is marked as Send but lacks bounds on its EntityStore and ComponentStore. This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races.

Recommendations For versions through 2020-12-09, consider restricting the use of the World type to prevent sending non-thread safe EntityStore and ComponentStores across threads until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.