1267 matches found
Alibaba Cloud Linux 3 : 0096: rust-toolset:rhel8 (ALINUX3-SA-2023:0096)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0096 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-38497: Cargo downloads the Rust projects...
CVE-2025-4432 vulnerabilities
Vulnerabilities for packages: atuin, oranda, pixi, cargo-audit, rustls-ffi, lychee, shadowsocks-rust, zed, wasm-pack, tealdeer, wash, wadm, sdp-k8s-injector, linkerd-extension-init, wasmtime, kdash, wasmcloud, xh, sccache, zizmor, parseable, uv, buck2, sqlx, rustup, zola, ntpd-rs, qdrant, rye,...
GHSA-C86P-W88R-QVQR vulnerabilities
Vulnerabilities for packages: kdash, xh, oranda, sccache, wash, zola, ntpd-rs, wasmtime, cargo-audit, buck2, rye, samply, lychee, sqlx...
cargo-c-0.10.3~git0.ee7d7ef-3.1 on GA media (moderate)
cargo-c-0.10.3git0.ee7d7ef-3.1 on GA media Announcement ID: openSUSE-SU-2025:15057-1 Rating: moderate Cross-References: CVE-2025-3416 CVSS scores: CVE-2025-3416 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-3416 SUSE : 6.3...
OPENSUSE-SU-2025:15057-1 cargo-c-0.10.3~git0.ee7d7ef-3.1 on GA media
These are all security issues fixed in the cargo-c-0.10.3git0.ee7d7ef-3.1 package on the GA media of openSUSE Tumbleweed...
asn-tools (>=0.2.2, <=0.2.5), bitslideslib (>=0.1.1, <=0.1.2) +13 more potentially affected by unknown CVE via shaman (0.1.0)
shaman CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - asn-tools =0.2.2, =0.1.1, =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...
audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)
mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-927Q-G9W9-PM54...
mcai_worker_sdk (>=0.11.0-alpha, <=2.2.1), srt_media (>=0.0.1, <=0.1.0) potentially affected by unknown CVE via stainless_ffmpeg (>=0.2.4, <=0.3.10)
stainlessffmpeg CARGO version =0.2.4, =0.11.0-alpha, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0169...
alloy-rs (0.2.1), anndata (0.2.0) +112 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.18.0)
arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.0.1, =0.1.0, =0.2.1, =0.2.2, =0.4.0, =0.1.0, =0.1.0, =0.1.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0038...
GHSA-PG9F-39PC-QF8G vulnerabilities
Vulnerabilities for packages: wasmcloud, fd, oranda, oxipng, cargo-c, pixi, rust-analyzer, wadm, ruff, cargo-audit, deno, samply, yazi, lychee, starship, zed, yara-x, nushell...
GHSA-PG9F-39PC-QF8G vulnerabilities
Vulnerabilities for packages: fd, yara-x, lychee, wadm, starship, yazi, samply, rust-analyzer, cargo-audit, cargo-c, ruff, ztunnel, wasmcloud, nushell, oranda, pixi, oxipng, deno, zed...
a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4947 more potentially affected by unknown CVE via tokio (>=0.2.5, <=1.38.1)
tokio CARGO version =0.2.5, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RR8G-9FPQ-6WMG...
endringer (>=0.1.0, <=0.7.1) potentially affected by CVE-2025-31130 via gix (0.0.0)
gix CARGO version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gix and may be impacted: - endringer =0.1.0, =0.7.1 Source cves: CVE-2025-31130 Source advisory: OSV:GHSA-2FRX-2596-X5R6...
CVE-2024-35197 vulnerabilities
Vulnerabilities for packages: cargo-audit...
CVE-2024-35186 vulnerabilities
Vulnerabilities for packages: cargo-audit...
CVE-2024-32884 vulnerabilities
Vulnerabilities for packages: cargo-audit...
GHSA-7W47-3WG8-547C vulnerabilities
Vulnerabilities for packages: cargo-audit...
GHSA-CX7H-H87R-JPGR vulnerabilities
Vulnerabilities for packages: cargo-audit...