{"id":"GHSA-mpg5-fvwp-42m2","aliases":["RUSTSEC-2022-0002"],"status":"published","title":"Unsoundness in `dashmap` references","description":"Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock.\nThis causes undefined behavior and may result in a segfault.\n\nMore information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-01-10T12:00:00Z","modified":"2023-11-08T04:21:12Z","fixes":[{"ecosystem":"crates.io","package":"dashmap","fixed_in":["5.1.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"dashmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.0"},{"last_affected":"5.0.0"},{"fixed":"5.1.0"}]}],"versions":["5.0.0"]},{"source":"osv","ecosystem":"crates.io","package":"dashmap","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.1.0"}]}],"versions":["5.0.0"]},{"source":"osv","ecosystem":"crates.io","package":"dashmap","ranges":[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.1.0"}]}]}],"references":[{"url":"https://github.com/xacrimon/dashmap/issues/167","tags":["web","report"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2022-0002.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-mpg5-fvwp-42m2"},{"url":"https://github.com/xacrimon/dashmap","tags":["package"]},{"url":"https://crates.io/crates/dashmap","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-mpg5-fvwp-42m2","title":"Unsoundness in `dashmap` references","description":"Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock.\nThis causes undefined behavior and may result in a segfault.\n\nMore information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.\n","status":"published","published":"2022-06-16T23:52:24Z","modified":"2023-06-13T17:30:43Z","updated_at":"2026-11-02T14:36:53.654352Z"}],"osv":[{"id":"GHSA-mpg5-fvwp-42m2","title":"Unsoundness in `dashmap` references","description":"Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock.\nThis causes undefined behavior and may result in a segfault.\n\nMore information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.\n","status":"published","published":"2022-06-16T23:52:24Z","modified":"2023-11-08T04:21:12.292742Z","updated_at":"2026-11-02T15:46:52.170928Z"},{"id":"RUSTSEC-2022-0002","title":"Unsoundness in `dashmap` references","description":"Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock.\nThis causes undefined behavior and may result in a segfault.\n\nMore information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.","status":"published","published":"2022-01-10T12:00:00Z","modified":"2023-11-08T04:21:12.292742Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}