AZL-63771 CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

UBUNTU-CVE-2025-5791

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

CVE-2025-5791

The CVE-2025-5791 entry concerns the Rust users crate with privilege escalation via incorrect group listing when a process has fewer than 1024 groups, which can incorrectly include the root group in the access list. Affected component: the user’s Rust crate (rust-users). Local/exploit path is ind...

CVE-2025-5791 Users: `root` appended to group listings

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list...

basejmp (0.1.0), clarinet (>=0.2.0, <=0.10.0) +9 more potentially affected by CVE-2025-48934 via deno_runtime (>=0.3.0, <=0.105.0)

denoruntime CARGO version =0.3.0, =0.2.0, =1.6.1, =1.12.2, =0.2.0-rc1, =0.4.1, =0.4.1, =0.4.1, =0.4.1, =0.4.2 - zinniaruntime 0.0.3 Source cves: CVE-2025-48934 Source advisory: OSV:GHSA-7W8P-CHXQ-2789...

Amazon Linux 2023 : librsvg2, librsvg2-devel, librsvg2-tools (ALAS2023-2025-992)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-992 advisory. RUSTSEC-2024-0429 is a vulnerability discovered in the glib Rust crate affecting versions prior to 0.20.0. The issue involves unsoundness in Iterator and DoubleEndedIterator implementations for...

GHSA-CM3G-QM4H-XM6M SCSIR has a Potential Unsound Issue in WriteSameCommand

In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...

CVE-2025-48755

In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST zero-sized type...

CVE-2025-48753

In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock...

CVE-2025-48756

In groupnumber in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits e.g., 5 bits for group number...

CVE-2025-48751

CVE-2025-48751 involves the Rust crate process_lock version 0.1.0. The available documents describe a race condition in the unlock pathway that can lead to data races and potentially unpredictable behavior. Concrete details across sources confirm the affected component (the unlock logic in the pr...

CVE-2025-48754

CVE-2025-48754 affects the memory_pages crate 0.1.0 for Rust, where a division by zero can occur. Public sources corroborate the issue (NVD CVSS 3.1 base score 7.5 HIGH; GHSA/Red Hat entries describe the same division-by-zero problem). The connected documents do not provide a concrete patch versi...

CVE-2021-26305

An issue was discovered in Deserializer::readvec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness...

CVE-2021-25902

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, maparray can perform a double drop...

CVE-2020-35868

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification...

pingora (>=0.1.0, <=0.4.0), pingora-cache (>=0.1.0, <=0.4.0) +3 more potentially affected by CVE-2025-4366 via pingora-core (>=0.1.1, <=0.4.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - static-files-module 0.1.0 Source cves: CVE-2025-4366 Source advisory: OSV:RUSTSEC-2025-0037...

CVE-2019-15543

An issue was discovered in the slice-deque crate before 0.2.0 for Rust. There is memory corruption in certain allocation cases...

CVE-2018-20993

An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization...

CVE-2018-20995

An issue was discovered in the slice-deque crate before 0.1.16 for Rust. moveheadunchecked allows memory corruption because deque updates are mishandled...

CVE-2019-25005

An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext...