Threat database

CVE-2026-46690 is a medium severity vulnerability in the spearman unbounded-spsc queue library versions 0.2.0 and earlier. It involves an out-of-bounds read caused by a pointer-as-value transmute operation in the sender::send function, which can lead to a fake-Arc drop during concurrent transmit/receive races. No patches or official fixes are available at the time of publication.