-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| futures-task | rust | < 0.3.5 | 0.3.5 |
The vulnerability root cause is explicitly tied to noop_waker_ref's implementation using thread-local storage. The reproduction example demonstrates crash occurs when the waker reference crosses thread boundaries. Advisory descriptions and CVE analysis all identify this function as the source of improper thread-local storage handling. The function's design violated thread safety assumptions as Waker's Sync implementation allowed cross-thread usage.
Ongoing coverage of React2Shell