CVSS 3.1
4.7 mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2020-36203
Medium (4.7) in reffers project reffers. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in reffers 0.6.1.
An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-362, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- reffers_project:reffers
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-39xg-8p43-h76x | crates.io | reffers | <0.6.1 | 0.6.1 |
| RUSTSEC-2020-0094 | crates.io | reffers | >=0.0.0-0 <0.6.1 | 0.6.1 |