Security : Rust Binder contains the following unsafe operation on kernel.

This operation is unsafe because when touching the prev/next pointers of a list element, we have to ensure that no other thread is also touching them in parallel. If the node is present in the list that `remove` is called on, then that is fine because we have exclusive access to that list. If the node is not in any list, then it's also ok. But if it's present in a different list that may be accessed in parallel, then that may be a data race on the prev/next pointers.

See the official linux kernel.

News : Reporting a security issue - good practice.

This is how the python solve a security issue:

We take security very seriously and ask that you follow our security policy carefully.

If you've identified a security issue with a project hosted on PyPI.

Login to your PyPI account, then visit the project's page on PyPI. At the bottom of the sidebar, click Report project as malware. Supply the following details in the form:

• A URL to the project in question
• An explanation of what makes the project a security issue
• A link to the problematic lines in the project's distributions via inspector.pypi.io

Important! If you believe you've identified a security issue with PyPI, DO NOT report the issue in any public forum, including (but not limited to):

• Our GitHub issue tracker
• Official or unofficial chat channels
• Official or unofficial mailing lists

See the official webpage.