-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| crossbeam-channel | rust | >= 0.5.11, < 0.5.15 | 0.5.15 |
RustRustMiggo AIRoot Cause AnalysisThe analysis is based on the provided commit information from pull request #1187. The commit message explicitly details the race condition within Channel::discard_all_messages and how it leads to Channel::drop performing a double free. The patch modifies Channel::discard_all_messages to prevent this condition. Both functions are therefore critical to understanding and triggering the vulnerability. The discard_all_messages function is where the faulty logic resided, and drop is where the double free would manifest.
Ongoing coverage of React2Shell