GHSA-2qv5-7mw5-j3cg: spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers

April 3, 2023

Once::try_call_once is unsound if invoked more than once concurrently and any call fails to initialise successfully.

References

github.com/advisories/GHSA-2qv5-7mw5-j3cg
github.com/mvdnes/spin-rs
github.com/mvdnes/spin-rs/issues/148
rustsec.org/advisories/RUSTSEC-2023-0031.html

Code Behaviors & Features

Detect and mitigate GHSA-2qv5-7mw5-j3cg with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →