VDB
GHSA-rr8g-9fpq-6wmg
GHSA-rr8g-9fpq-6wmg
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Tokio broadcast channel calls clone in parallel, but does not require `Sync`
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | ztunnel-1.24 | 0 |
| chainguard | ztunnel-fips-1.25 | 0 |
| wolfi | berg | 0 |
| chainguard | zizmor | 0 |
| wolfi | yazi | 0 |
| wolfi | wadm | 0 |
| chainguard | wizer | 0 |
| chainguard | guestproxyagent | 0 |
| wolfi | zola | 0 |
| wolfi | nushell | 0 |
| wolfi | pgcat | 0 |
| wolfi | linkerd-network-validator | 0 |
| chainguard | helix | 0 |
| crates.io | tokio | 1.39.0, 1.44.0, 0.2.5 |
| chainguard | zellij | 0 |
| chainguard | xh | 0 |
| wolfi | zizmor | 0 |
| chainguard | buck2 | 0 |
| wolfi | oranda | 0 |
| chainguard | samply | 0 |
…and 77 more
Timeline
- Apr 7, 2025 CVE Published
- Oct 31, 2025 CVE Updated