CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-36441
High (8.1) in abox project abox. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in abox 0.4.1.
An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no requirement for T: Send and T: Sync.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-11-01)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- abox_project:abox
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-r626-fc64-3q28 | crates.io | abox | <0.4.1 | 0.4.1 |
| RUSTSEC-2020-0121 | crates.io | abox | >=0.0.0-0 <0.4.1 | 0.4.1 |