roaring-landmask (0.4.0) potentially affected by CVE-2022-3358 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-3358 Source advisory: OSV:RUSTSEC-2022-0059...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +9 more potentially affected by CVE-2022-39252 via matrix-sdk-crypto (>=0.1.0, <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2022-39252 Source advisory: OSV:RUSTSEC-2022-0085...

accrete (>=0.1.7, <=0.2.0), adana-script-wasm (>=0.16.5-rc.1, <=0.17.10) +321 more potentially affected by unknown CVE via wee_alloc (>=0.1.0, <=0.4.5)

weealloc CARGO version =0.1.0, =0.1.7, =0.16.5-rc.1, =0.1.0, =0.4.0, =0.1.1, =0.1.2, =1.4.0, =0.1.0, =0.2.8 - biscuit-wasm 0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RC23-XXGQ-X27G...

accepted (>=0.2.0, <=0.3.2), aigc_api (5.1.2) +505 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VFV3-9W6V-23JP...

roaring-landmask (0.4.0) potentially affected by CVE-2022-2097 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-2097 Source advisory: OSV:RUSTSEC-2022-0032...

auto-wasi (0.1.0), ceres-executor (>=0.1.0, <=0.2.0) +82 more potentially affected by CVE-2022-23636 +1 more via wasmtime (>=0.7.0, <=0.37.0)

wasmtime CARGO version =0.7.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0-pre, =0.4.0-pre, =0.0.0, =0.40.1, =0.45.0, =0.10.0, =0.1.0, =0.1.0, =0.3.0 - inkpad-executor 0.1.0 and more Source cves: CVE-2022-23636, CVE-2022-31169 Source advisory: OSV:RUSTSEC-2022-0101...

rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31100 via rulex (>=0.1.0, <=0.3.0)

rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31100 Source advisory: OSV:GHSA-8V9W-P43C-R885...

tremor-language-server (>=0.7.3, <=0.7.4) potentially affected by CVE-2021-45701 +1 more via tremor-script (0.7.2)

tremor-script CARGO version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on tremor-script and may be impacted: - tremor-language-server =0.7.3, =0.7.4 Source cves: CVE-2021-45701, CVE-2021-45702 Source advisory: OSV:GHSA-3PP4-64MP-9CG9...

optra (>=0.1.0, <=0.2.1) potentially affected by CVE-2021-45694 via rdiff (0.1.2)

rdiff CARGO version 0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on rdiff and may be impacted: - optra =0.1.0, =0.2.1 Source cves: CVE-2021-45694 Source advisory: OSV:GHSA-Q579-9WP9-GFP2...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1253 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-WGRG-5H56-JG27...

GHSA-F67M-9J94-QV9J Parser creates invalid uninitialized value

Affected versions of this crate called mem::uninitialized in the HTTP1 parser to create values of type httparse::Header from the httparse crate. This is unsound, since Header contains references and thus must be non-null. The flaw was corrected by avoiding the use of mem::uninitialized, using...

audir (0.1.0), com-impl (>=0.1.0, <=0.1.1) +6 more potentially affected by CVE-2021-45681 via derive-com-impl (0.1.1)

derive-com-impl CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on derive-com-impl and may be impacted: - audir 0.1.0 - com-impl =0.1.0, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha4 - dxgi 0.3.0-alpha4 - wic 0.3.0-alpha1 Source cves:...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), abci-rs (0.2.0) +424 more potentially affected by unknown CVE via crossbeam-queue (>=0.1.2, <=0.2.0)

crossbeam-queue CARGO version =0.1.2, =0.5.0-alpha.6, =0.0.2, =0.0.1, =0.1.0-alpha.2, =0.1.5, =0.12.0, =0.5.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6888-WF7J-34JQ...

a2 (>=0.3.6, <=0.5.0-alpha.7), abci-rs (0.2.0) +937 more potentially affected by unknown CVE via crossbeam-channel (>=0.1.3, <=0.3.9)

crossbeam-channel CARGO version =0.1.3, =0.3.6, =0.4.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9G55-PG62-M8HH...

GHSA-72R2-RG28-47V9 `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer. Read on uninitialized buffer is defined as undefined behavior in Rust...

a3mo_lib (>=0.1.0, <=0.1.1), aaa_csv_challenge (0.1.0) +6422 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0, <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.0.1, =0.1.0-pre.1, =0.5.0, =0.3.0, =0.3.0-alpha.1, =0.1.0, =0.2.0-alpha.2 - accept-encoding-fork 0.2.0-alpha.3 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:GHSA-JQ66-XH47-J9F3...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:GHSA-J8Q9-5RP9-4MV9...

gemachain-bpf-loader-program (1.8.0), lido (1.1.0-patch.1) +42 more potentially affected by CVE-2022-31264 via solana_rbpf (>=0.1.5, <=0.2.24)

solanarbpf CARGO version =0.1.5, =1.2.3, =0.1.1, =0.1.4, =0.1.0, =1.0.2, =3.0.1, =1.6.16, =1.6.16, =1.2.3, =1.2.4 and more Source cves: CVE-2022-31264 Source advisory: OSV:GHSA-FFX3-8QVM-PQ3J...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1343 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1343 Source advisory: OSV:GHSA-MFM6-R9G2-Q4R7...

roaring-landmask (0.4.0) potentially affected by CVE-2022-1473 via openssl-src (300.0.0+3.0.0)

openssl-src CARGO version 300.0.0+3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - roaring-landmask 0.4.0 Source cves: CVE-2022-1473 Source advisory: OSV:GHSA-G323-FR93-4J3C...