Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/128020?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/128020?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.5-1?distro=trixie", "type": "deb", "namespace": "debian", "name": "rust-lock-api", "version": "0.4.5-1", "qualifiers": { "distro": "trixie" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "0.4.9-1", "latest_non_vulnerable_version": "0.4.14-1", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/100447?format=api", "vulnerability_id": "VCID-5136-64sb-j3gy", "summary": "An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35910", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00057", "scoring_system": "epss", "scoring_elements": "0.17891", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00057", "scoring_system": "epss", "scoring_elements": "0.1791", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00057", "scoring_system": "epss", "scoring_elements": "0.18005", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00057", "scoring_system": "epss", "scoring_elements": "0.18007", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00057", "scoring_system": "epss", "scoring_elements": "0.17929", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00057", "scoring_system": "epss", "scoring_elements": "0.17969", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35910" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35910", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35910" }, { "reference_url": "https://github.com/Amanieu/parking_lot", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot" }, { "reference_url": "https://github.com/Amanieu/parking_lot/commit/7de94f95f519d8281cb48457964065b463d26736", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot/commit/7de94f95f519d8281cb48457964065b463d26736" }, { "reference_url": "https://github.com/Amanieu/parking_lot/pull/262", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot/pull/262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35910", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35910" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854", "reference_id": "1032854", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319", "reference_id": "975319", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319" }, { "reference_url": "https://github.com/advisories/GHSA-ppj3-7jw3-8vc4", "reference_id": "GHSA-ppj3-7jw3-8vc4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ppj3-7jw3-8vc4" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/128020?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.5-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.5-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128019?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.9-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.9-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128022?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.12-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.12-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128021?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.14-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.14-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2020-35910", "GHSA-ppj3-7jw3-8vc4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5136-64sb-j3gy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/100452?format=api", "vulnerability_id": "VCID-6199-d7ay-aucj", "summary": "An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35914", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13857", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13742", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13826", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13782", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13862", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13771", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35914" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35914", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35914" }, { "reference_url": "https://github.com/Amanieu/parking_lot", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot" }, { "reference_url": "https://github.com/Amanieu/parking_lot/pull/262", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot/pull/262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35914", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35914" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854", "reference_id": "1032854", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319", "reference_id": "975319", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319" }, { "reference_url": "https://github.com/advisories/GHSA-gmv4-vmx3-x9f3", "reference_id": "GHSA-gmv4-vmx3-x9f3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-gmv4-vmx3-x9f3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/128020?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.5-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.5-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128019?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.9-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.9-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128022?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.12-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.12-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128021?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.14-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.14-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2020-35914", "GHSA-gmv4-vmx3-x9f3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6199-d7ay-aucj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/100451?format=api", "vulnerability_id": "VCID-65ca-5h29-q3bs", "summary": "An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35913", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13212", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13098", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13173", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13132", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13209", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00042", "scoring_system": "epss", "scoring_elements": "0.13128", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35913" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35913", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35913" }, { "reference_url": "https://github.com/Amanieu/parking_lot", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot" }, { "reference_url": "https://github.com/Amanieu/parking_lot/pull/262", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot/pull/262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35913", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35913" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854", "reference_id": "1032854", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319", "reference_id": "975319", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319" }, { "reference_url": "https://github.com/advisories/GHSA-hj9h-wrgg-hgmx", "reference_id": "GHSA-hj9h-wrgg-hgmx", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hj9h-wrgg-hgmx" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/128020?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.5-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.5-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128019?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.9-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.9-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128022?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.12-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.12-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128021?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.14-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.14-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2020-35913", "GHSA-hj9h-wrgg-hgmx" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-65ca-5h29-q3bs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/100448?format=api", "vulnerability_id": "VCID-8qrc-fxaq-dqgu", "summary": "An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35911", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13857", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13742", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13826", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13782", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13862", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13771", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35911" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35911", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35911" }, { "reference_url": "https://github.com/Amanieu/parking_lot", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot" }, { "reference_url": "https://github.com/Amanieu/parking_lot/pull/262", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot/pull/262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35911", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35911" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854", "reference_id": "1032854", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319", "reference_id": "975319", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319" }, { "reference_url": "https://github.com/advisories/GHSA-vh4p-6j7g-f4j9", "reference_id": "GHSA-vh4p-6j7g-f4j9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vh4p-6j7g-f4j9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/128020?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.5-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.5-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128019?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.9-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.9-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128022?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.12-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.12-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128021?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.14-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.14-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2020-35911", "GHSA-vh4p-6j7g-f4j9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-8qrc-fxaq-dqgu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/100450?format=api", "vulnerability_id": "VCID-uprh-qgm6-jqc1", "summary": "An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35912", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13857", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13742", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13826", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13782", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13862", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00044", "scoring_system": "epss", "scoring_elements": "0.13771", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-35912" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35912", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35912" }, { "reference_url": "https://github.com/Amanieu/parking_lot", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot" }, { "reference_url": "https://github.com/Amanieu/parking_lot/pull/262", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/Amanieu/parking_lot/pull/262" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35912", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35912" }, { "reference_url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://rustsec.org/advisories/RUSTSEC-2020-0070.html" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854", "reference_id": "1032854", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032854" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319", "reference_id": "975319", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975319" }, { "reference_url": "https://github.com/advisories/GHSA-5wg8-7c9q-794v", "reference_id": "GHSA-5wg8-7c9q-794v", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-5wg8-7c9q-794v" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/128020?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.5-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.5-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128019?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.9-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.9-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128022?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.12-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.12-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/128021?format=api", "purl": "pkg:deb/debian/rust-lock-api@0.4.14-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.14-1%3Fdistro=trixie" } ], "aliases": [ "CVE-2020-35912", "GHSA-5wg8-7c9q-794v" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-uprh-qgm6-jqc1" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/rust-lock-api@0.4.5-1%3Fdistro=trixie" }