[im] Data races in im

An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-36204
• https://github.com/bodil/im-rs/issues/157
• https://rustsec.org/advisories/RUSTSEC-2020-0096.html
• https://github.com/bodil/im-rs/pull/158
• https://github.com/bodil/im-rs/releases/tag/v15.1.0
• https://github.com/advisories/GHSA-q9h2-4xhf-23xx