Skip to content

Product

crates.io tiny_future vulnerabilities

2 published CVES affecting crates.io tiny_future, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest crates.io tiny_future CVEs

Newest publication first

  1. GHSA-m296-j53x-xv95 Data races in tiny_future

    Published
    HighCVSS 8.1

    tiny_future contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was correcte...

  2. CVE-2020-36438 Data race in tiny_future

    Published
    HighCVSS 8.1

    An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.