[Ollie-Pearce]

Affected crate(s)

• gaoya (recent downloads per crates.io: 68,352)

Links to upstream issue(s) or PR(s)

serega/gaoya#38

Severity

Unsynchronised accesses to an interior mutable type allow for a data race from safe code

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate

Received no response from maintainer over a month after public disclosure.

[djc]

Pinged the maintainer in the upstream issue -- feel free to ping me again if they haven't responded in a week.

(IMO you should spend a bit more effort trying to engage maintainers directly instead of submitting a single PR, waiting 2 months, then submitting an advisory.)

[Ollie-Pearce]

Thanks, noted I'll bear the advice in mind

[Ollie-Pearce]

Hi @djc would you mind adding this? Thanks!

[djc]

Sent a private email to the maintainer -- please ping me again in two weeks if there is no movement.