1267 matches found
a2d (>=0.1.0, <=0.1.11), aaa (>=0.1.0, <=1.1.1) +9852 more potentially affected by unknown CVE via instant (>=0.1.9, <=0.1.13)
instant CARGO version =0.1.9, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0384...
aruna_policy (>=0.1.0, <=0.1.2), async-bb8-diesel (>=0.1.0, <=0.2.1) +103 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.1.6)
diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.0, =0.1.1 - crabrocketschema 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WQ9X-QWCQ-MMGF...
aruna_policy (>=0.1.0, <=0.1.2), async-bb8-diesel (>=0.1.0, <=0.2.1) +103 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.1.6)
diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.0, =0.1.1 - crabrocketschema 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0365...
abacuz (0.1.1), acme-dns-rust (>=1.0.0, <=1.1.6) +309 more potentially affected by unknown CVE via sqlx (>=0.2.6, <=0.8.0)
sqlx CARGO version =0.2.6, =1.0.0, =0.0.2, =0.11.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0-beta.0, =0.3.0-beta.0, =0.4.3 - appenddbpostgres 0.2.0 - aquadoggo 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0363...
Malicious code in cargo-hub-ui-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8018 Malicious code in cargo-hub-ui-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cargo-hub-ui-api-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8019 Malicious code in cargo-hub-ui-api-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
biscuit-cli (>=0.4.1, <=0.4.2) potentially affected by CVE-2024-41949 +1 more via biscuit-auth (4.1.1)
biscuit-auth CARGO version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on biscuit-auth and may be impacted: - biscuit-cli =0.4.1, =0.4.2 Source cves: CVE-2024-41949, CVE-2024-42350 Source advisory: OSV:GHSA-P9W4-585H-G3C7...
OPENSUSE-SU-2024:14224-1 cargo-audit-advisory-db-20240730-1.1 on GA media
These are all security issues fixed in the cargo-audit-advisory-db-20240730-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20240729-09
Vulnerability in Cargo package manager of Rust programming language is related to ignoring umask when extracting archives created on UNIX-like systems. when retrieving archives created on UNIX-like systems. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute...
The vulnerability of the Cargo package manager in the Rust programming language allows a hacker to execute arbitrary code.
The vulnerability of the Cargo package manager in the Rust programming language is related to the ignoring of umask when extracting archives created on UNIX-like systems. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20240729-11
A vulnerability in the Cargo package manager of the Rust programming language involves the injection of arbitrary HTML after including it in a report generated by Cargo. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code...
ayaka-model (0.2.0), ayaka-runtime (0.2.0) +26 more potentially affected by unknown CVE via zerovec (>=0.2.3, <=0.8.1)
zerovec CARGO version =0.2.3, =0.3.0, =0.6.0, =1.0.0-beta1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XRV3-JMCP-374J...
OESA-2024-1811 rust security update
Rust is a systems programming language focused on three goals:safety, speed,and concurrency.It maintains these goals without having a garbage collector, making it a useful language for a number of use cases other languages are not good at: embedding in other languages, programs with specific spac...
OESA-2024-1812 rust security update
Rust is a systems programming language focused on three goals:safety, speed,and concurrency.It maintains these goals without having a garbage collector, making it a useful language for a number of use cases other languages are not good at: embedding in other languages, programs with specific spac...
async-mongodb-session (2.1.0), chord-action (>=0.1.13, <=0.1.16) +7 more potentially affected by CVE-2024-6382 via mongodb (>=2.0.0-alpha, <=2.6.1)
mongodb CARGO version =2.0.0-alpha, =0.1.13, =0.1.13, =0.1.13, =0.2.1, =0.3.2 - mongodb-gridfs 0.2.0 - rocketauthifier 0.111.0 - sqlite2mongo 0.3.0 Source cves: CVE-2024-6382 Source advisory: OSV:GHSA-32JF-H775-G29H...
OPENSUSE-SU-2024:11720-1 cargo-c-0.8.1~git0.cce1b08-2.1 on GA media
These are all security issues fixed in the cargo-c-0.8.1git0.cce1b08-2.1 package on the GA media of openSUSE Tumbleweed...