Every CVESearch/Get API key

GHSA-mpg5-fvwp-42m2

Unsoundness in `dashmap` references

No scoreFix available

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

What each source reports

GitHub AdvisoriesNo score

Unsoundness in `dashmap` references

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

Record
GHSA-mpg5-fvwp-42m2
Updated
2026-11-02
OSVNo score

Unsoundness in `dashmap` references

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

Record
GHSA-mpg5-fvwp-42m2
Updated
2026-11-02
OSVRUSTSEC-2022-0002No score

Unsoundness in `dashmap` references

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

Record
RUSTSEC-2022-0002
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
dashmap
crates.io
5.0.0 to 5.0.0
5.1.0
dashmap
crates.io
5.0.0 up to 5.1.0
5.1.0

History

History
RecordedChangedSources
first indexedGitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-mpg5-fvwp-42m2 is a vulnerability with no CVSS score yet in dashmap, published January 10, 2022. No source lists public exploit code. Fixed in dashmap 5.1.0.

References

MoveEnter Open