CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2021-38191
Medium (5.9) in tokio tokio. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in tokio 1.5.1, 1.6.3, 1.7.2.
An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tokio:tokio
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2grh-hm3w-w7hv | crates.io | tokio | >=1.8.0 <1.8.1 | 1.8.1 |
| GHSA-2grh-hm3w-w7hv | crates.io | tokio | >=1.7.0 <1.7.2 | 1.7.2 |
| GHSA-2grh-hm3w-w7hv | crates.io | tokio | >=1.6.0 <1.6.3 | 1.6.3 |
| GHSA-2grh-hm3w-w7hv | crates.io | tokio | >=0.3.0 <1.5.1 | 1.5.1 |
| RUSTSEC-2021-0072 | crates.io | tokio | >=0.3.0 <1.5.1 >=1.6.0 <1.6.3 >=1.7.0 <1.7.2 >=1.8.0 <1.8.1 | 1.5.1, 1.6.3, 1.7.2, 1.8.1 |