{"id":"GHSA-2qv5-7mw5-j3cg","aliases":["RUSTSEC-2023-0031"],"url":"https://o3.security/vulnerability/GHSA-2qv5-7mw5-j3cg","summary":"spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers","details":"`Once::try_call_once` is unsound if invoked more than once concurrently and any call fails to initialise successfully.\n","published":"2023-04-03T22:53:18Z","modified":"2026-09-10T03:49:53.155588159Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"spin","fixedVersion":"0.9.8"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/mvdnes/spin-rs/issues/148"},{"type":"PACKAGE","url":"https://github.com/mvdnes/spin-rs"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2023-0031.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-10T03:49:53.155588159Z"}}