RUSTSEC-2020-0139: 
Rust vulnerability analysis and mitigation

The vulnerability (RUSTSEC-2020-0139/CVE-2020-36459) was discovered in the dces crate for Rust, affecting versions through 2020-12-09. The issue involves the World type being incorrectly marked as Send without proper bounds on its EntityStore and ComponentStore (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 8.1 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a Base Score of 6.8 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:P/I:P/A:P). The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command) (NVD).

The vulnerability could potentially lead to high impacts on confidentiality, integrity, and availability of affected systems, as indicated by the CVSS scoring. The network attack vector suggests remote exploitation possibility, though it requires high attack complexity (NVD).

The vulnerability is exploitable over the network (AV:N) with high attack complexity (AC:H). No privileges (PR:N) or user interaction (UI:N) are required for exploitation (NVD).