CVE-2020-36438

HIGH

tiny_future < 0.4.0 - Race Condition via Improper Send and Sync Trait Bounds

Title source: llm

An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.

Core 2

Core References

Third Party Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 8.1

EPSS 0.0077

EPSS Percentile 50.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-362

Status published

Products (2)

crates.io/tiny_future 0 - 0.4.0crates.io

tiny_future_project/tiny_future < 0.4.0

Published Aug 08, 2021

Tracked Since Feb 18, 2026