tandem_garble_interop (>=0.1.0, <=0.3.0) potentially affected by unknown CVE via tandem (>=0.1.0, <=0.3.0)

tandem CARGO version =0.1.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0117...

Hackers commit highway robbery, stealing cargo and goods

There’s a modern-day train heist happening across America, and this time, some of the bandana-masked robbers are sitting behind screens. According to new research, a group of cybercriminals has been attacking trucking, freight, and logistics companies for months, impersonating brands and even...

Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks

Bad actors are increasingly training their sights on trucking and logistics companies with an aim to infect them with remote monitoring and management RMM software for financial gain and ultimately steal cargo freight. The threat cluster, believed to be active since at least June 2025 according t...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: manifest-tool, fq, terraform-docs, yunikorn-k8shim, xcaddy, grpcurl, elvish, aws-signer-notation-plugin, logstash-exporter, vault-secrets-webhook, cadvisor, regclient, lazydocker, velero-plugin-for-aws, tfsec, kubernetes-csi-external-health-monitor, openbao-k8s,...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: manifest-tool, fq, terraform-docs, yunikorn-k8shim, xcaddy, grpcurl, elvish, aws-signer-notation-plugin, logstash-exporter, vault-secrets-webhook, cadvisor, regclient, lazydocker, velero-plugin-for-aws, tfsec, kubernetes-csi-external-health-monitor, openbao-k8s,...

Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-expressions can lead to excessive resource...

Security update for afterburn

This update for afterburn fixes the following issues: Update to version 5.9.0.git21.a73f509. Security issues fixed: CVE-2022-24713: regex: no proper complexity limitation when parsing untrusted regular expressions with large repetitions on empty sub-expressions can lead to excessive resource...

cargo-kconfig (0.0.1), cli-todo (>=0.2.0, <=0.7.0) potentially affected by unknown CVE via ncurses (6.0.1)

ncurses CARGO version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ncurses and may be impacted: - cargo-kconfig 0.0.1 - cli-todo =0.2.0, =0.7.0 Source cves: unknown CVE Source advisory: OSV:GHSA-X77X-7MMH-CXV3...

cargo-audit-advisory-db-20251021-1.1 on GA media (moderate)

cargo-audit-advisory-db-20251021-1.1 on GA media Announcement ID: openSUSE-SU-2025:15652-1 Rating: moderate Cross-References: CVE-2025-62370 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

apple-opensource-downloader (0.1.0), async_bagit (>=0.1.0, <=0.2.0) +14 more potentially affected by CVE-2025-62518 via tokio-tar (0.3.1)

tokio-tar CARGO version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio-tar and may be impacted: - apple-opensource-downloader 0.1.0 - asyncbagit =0.1.0, =0.1.8, =0.8.0, =0.7.0, =0.2.0, =0.0.0, =0.1.0, =0.2.5, =0.4.0, =0.2.14, =0.6.0,...

OPENSUSE-SU-2025:15652-1 cargo-audit-advisory-db-20251021-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20251021-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-62655

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...

CVE-2025-62671

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...

unic (>=0.5.0, <=0.6.0), unic-bidi (0.6.0) +12 more potentially affected by unknown CVE via unic-utils (>=0.5.0, <=0.6.0)

unic-utils CARGO version =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0091...

aocleaderboard (>=0.1.0, <=0.6.1), archetect (>=0.5.0, <=0.7.3) +94 more potentially affected by unknown CVE via unic-segment (>=0.7.0, <=0.9.0)

unic-segment CARGO version =0.7.0, =0.1.0, =0.5.0, =0.5.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.1.0, =0.1.3, =0.2.1, =0.1.2-beta, =0.1.8 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0074...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +321 more potentially affected by unknown CVE via unic-common (>=0.7.0, <=0.9.0)

unic-common CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

rust-network-mgr (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via nftnl (0.7.0)

nftnl CARGO version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nftnl and may be impacted: - rust-network-mgr =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0126...

bootstring (0.1.0), deltachat_message_parser (>=0.3.0, <=0.14.1) +8 more potentially affected by unknown CVE via unic-idna-punycode (>=0.1.1, <=0.9.0)

unic-idna-punycode CARGO version =0.1.1, =0.3.0, =0.3.0, =0.2.4-beta, =0.3.0, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.1.1, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0088...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-case (>=0.6.0, <=0.9.0)

unic-ucd-case CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0092...