CVE-2020-36220: Va-Ts Project Va-Ts

Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer<T> omits a required T: Send bound, a data race and memory corruption can occur.

Affected products

• Va-Ts Project Va-Ts: before 0.0.4 (fixed in 0.0.4)

Published 2021-01-26. Last modified 2026-06-17.