High, CVSS 8.1crates.ioPublished
Command injection in kekbit
CVE-2020-36449 · GHSA-g83m-67wh-whpw
- Affected
- crates.io kekbit < 0.3.4
- Fixed in
- 0.3.4· Vendor fix available
- Issue
- An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter<H, Send is implemented without requiring H: Send.
Recommended action: Upgrade to 0.3.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.