CVE-2020-36439

Name of the Vulnerable Software and Affected Versions ticketed lock crate versions prior to 0.3.0

Description The issue allows sending non-Send types to other threads by unconditionally implementing Send for ReadTicket and WriteTicket. This can create data races by cloning types with internal mutability and sending them to other threads, potentially causing memory corruption or other undefined behavior.

Recommendations For versions prior to 0.3.0, update to version 0.3.0 or later, which includes the fix by adding T: Send bounds to Send impls of ReadTicket and WriteTicket. As a temporary workaround, consider avoiding the use of ReadTicket and WriteTicket with non-Send types to minimize the risk of exploitation.