CVE-2021-45704: Metrics-Util Project Metrics-Util

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket<T> unconditionally implements the Send and Sync traits.

Affected products

• Metrics-Util Project Metrics-Util: before 0.7.0 (fixed in 0.7.0)

Published 2021-12-27. Last modified 2026-06-17.