CVE-2020-36460

Name of the Vulnerable Software and Affected Versions model crate through 2020-11-10

Description An issue was discovered in the Shared data structure, which implements the Send and Sync traits without regard for the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type.

Recommendations For model crate through 2020-11-10, users are advised to treat Shared as an unsafe type and not use it outside of the testing context. Care must be taken to ensure that the testing code does not have a data race, besides a race condition that is expected to be caught by the test.