cve.bz

CVE-2020-35897

4.7 mediumEPSS 0.2%

Medium (4.7) in atom project atom. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in atom 0.3.6.

An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race.

Severity

CVSS 3.1

4.7 medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWE
CWE-362
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-9cg2-2j2h-59v9crates.ioatom<0.3.60.3.6
RUSTSEC-2020-0044crates.ioatom>=0.0.0-0 <0.3.60.3.6

References

Check your stackJSON