Tokio vulnerabilities

CVE-2024-27308 [CRITICAL] CWE-416 CVE-2024-27308: Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumst Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends on how mio is used. For some applications, invalid tokens may be ignored or cause a warnin

CVE-2023-22466 [MEDIUM] CWE-665 CVE-2023-22466: Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to vers Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows named pipe server, setting `pipe_mode` will reset `reject_remote_clients` to `false`. If the application has previously configured `reject_remote_clients` to `true`, this effectively undoes t

CVE-2021-45710 [HIGH] CWE-362 CVE-2021-45710: An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.

CVE-2021-38191 [MEDIUM] CWE-362 CVE-2021-38191: An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task m An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.