CVE catalog

CVE-2020-36471

rust-generator: CVE-2020-36471

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.09% · Oct 25, 2026

An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function (for yielding values) has Send bounds.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-generatorsid0.8.10-4fixed
Debianrust-generatorforky0.8.10-4fixed
Debianrust-generatortrixie0.7.1-1.1fixed
Debianrust-generatorbookworm0.7.1-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-generatorsourcesid0.7.1-1not yet assignedNot reported[992047]
Debianrust-generatorsourceforky0.7.1-1not yet assignedNot reported[992047]
Debianrust-generatorsourcetrixie0.7.1-1not yet assignedNot reported[992047]
Debianrust-generatorsourcebookworm0.7.1-1not yet assignedNot reported[992047]

[Debian bug #992047]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [rust-generator]

    Details (2)
    • 0.7.1-1 · amd64 · bookworm

      Fixed · Fixed: 0.7.1-1

      dsa · rust-generator · debian · bookworm; dsa · rust-generator · debian · 12

    • 0.7.1-1 · arm64 · bookworm

      Fixed · Fixed: 0.7.1-1

      dsa · rust-generator · debian · bookworm; dsa · rust-generator · debian · 12

[Debian 13 (Trixie)]

  • Source package: [rust-generator]

    Details (2)
    • 0.7.1-1.1 · amd64 · trixie

      Fixed · Fixed: 0.7.1-1

      dsa · rust-generator · debian · 13

    • 0.7.1-1.1 · arm64 · trixie

      Fixed · Fixed: 0.7.1-1

      dsa · rust-generator · debian · 13

Observed:

References