-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
RustRustMiggo AIRoot Cause AnalysisThe vulnerability stems from the unsafe implementation of the Sync trait for TryMutex<T> without any type constraints. In Rust, Sync indicates that a type can be safely shared between threads. For mutex-guarded types, this should require T: Send to ensure contained values can cross thread boundaries safely. The unconditional implementation (line 127 in lib.rs) allowed non-Send types like Rc<T> to be shared across threads via TryMutex, violating thread safety guarantees and creating data race conditions. The fix in 0.3.0 added T: Send bound to this trait implementation, confirming this was the root cause.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| try-mutex | rust | < 0.3.0 | 0.3.0 |
Ongoing coverage of React2Shell