495 matches found
libcrux-ml-dsa (0.0.3), libcrux-sha3 (>=0.0.3-alpha.2, <=0.0.3) potentially affected by unknown CVE via libcrux-intrinsics (0.0.3)
libcrux-intrinsics CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-intrinsics and may be impacted: - libcrux-ml-dsa 0.0.3 - libcrux-sha3 =0.0.3-alpha.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-2CGV-28VR-RV6...
Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems
Cybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functionality to stealthily execute on developer machines by masquerading as an Ethereum Virtual Machine EVM unit helper tool. The Rust crate,...
RUSTSEC-2025-0154 `replit_ruspty` was removed from crates.io for malicious code
The OpenSSF Package Analysis project identified 'replitruspty' @ 1.0.0 crates.io as malicious. Version 2.0.0 was also published with malware. It is considered malicious because: The package communicates with a domain associated with malicious activity. The package executes one or more commands...
mirror_sparse_matrix (>=0.1.1, <=0.1.17) potentially affected by unknown CVE via binary_vec_io (0.1.12)
binaryvecio CARGO version 0.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on binaryvecio and may be impacted: - mirrorsparsematrix =0.1.1, =0.1.17 Source cves: unknown CVE Source advisory: OSV:GHSA-WWXP-HXH6-8GF8...
alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +24 more potentially affected by unknown CVE via unic-ucd-common (>=0.7.0, <=0.9.0)
unic-ucd-common CARGO version =0.7.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.1.0, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0101...
doge_dns (>=0.2.4-beta, <=1.0.2), rev-up-your-harley (>=0.1.0, <=1.0.1) +4 more potentially affected by unknown CVE via unic-idna-mapping (>=0.4.0, <=0.9.0)
unic-idna-mapping CARGO version =0.4.0, =0.2.4-beta, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.4.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0097...
add_space (>=0.1.2, <=0.1.8), ale_python_parser (>=0.1.0, <=0.1.2) +72 more potentially affected by unknown CVE via unic-emoji-char (>=0.7.0, <=0.9.0)
unic-emoji-char CARGO version =0.7.0, =0.1.2, =0.1.0, =4.0.0-rc.1, =4.4.7, =0.1.0, =0.0.1-pre.3, =0.1.0, =0.1.0, =0.0.1, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0090...
nftnl (>=0.1.0, <=0.8.0) potentially affected by unknown CVE via mnl (>=0.1.0, <=0.2.3)
mnl CARGO version =0.1.0, =0.1.0, =0.8.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0142...
alemat (>=0.3.0, <=0.8.0), aocleaderboard (>=0.1.0, <=0.6.1) +111 more potentially affected by unknown CVE via unic-ucd-segment (>=0.7.0, <=0.9.0)
unic-ucd-segment CARGO version =0.7.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.3.0, =1.0.0, =0.1.0, =0.0.4, =0.1.0, =0.2.6, =0.0.15, =0.1.0, =0.1.3, =0.1.4 - config2args 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0104...
alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-case (>=0.6.0, <=0.9.0)
unic-ucd-case CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0092...
alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +18 more potentially affected by unknown CVE via unic-ucd (>=0.5.0, <=0.9.0)
unic-ucd CARGO version =0.5.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.0.0, =0.1.0, =1.1.1, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0077...
EUVD-2025-32904
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
CVE-2025-61670 Wasmtime has memory leak in C API with `externref` and `anyref` types
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the anyref or externref WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all prior versions of Wasmtime are unaffected. If...
EUVD-2021-1528
Malware in sbrugna...
EUVD-2021-1917
Malware in sbrugna...
EUVD-2021-1576
Malware in sbrugna...
EUVD-2021-1655
Malware in sbrugna...
EUVD-2021-1599
Malware in sbrugna...