CVE:CVE-2020-36450
CNNVD:CNNVD-202108-726
Rust是Mozilla基金会的一款通用、编译型编程语言。
Rust存在命令注入漏洞，该漏洞源于Rust的bunch crate,对于Bunch<T>有无条件的发送和同步实现。
solution:Upgrade bunch_project bunch to a higher version than 2020-11-12,and avoid the version (,2020-11-12]