CVE-2020-35886: Arr Project Arr

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race.

Affected products

• Arr Project Arr: up to and including 2020-08-25

Published 2020-12-31. Last modified 2026-06-17.