bitcoin (>=0.4.2, <=0.18.2), bitcoin-amount (>=0.1.3, <=0.1.4) +23 more potentially affected by unknown CVE via strason (>=0.3.4, <=0.4.0)

strason CARGO version =0.3.4, =0.4.2, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0386...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Rust prior to 1.81.0 that stems from a fix that can be bypassed when a batch file name has trailing spaces or periods...

GHSA-P2Q9-36VW-C468 olm-sys: wrapped library unmaintained, potentially vulnerable

After several cryptographic vulnerabilities in libolm were disclosed publicly, the Matrix Foundation has officially deprecated the library. olm-sys is a thin wrapper around libolm and is now deprecated and potentially vulnerable in kind. Users of olm-sys and its higher-level abstraction, olm-rs,...

olm-sys: wrapped library unmaintained, potentially vulnerable

After several cryptographic vulnerabilities in libolm were disclosed publicly, the Matrix Foundation has officially deprecated the library. olm-sys is a thin wrapper around libolm and is now deprecated and potentially vulnerable in kind. Users of olm-sys and its higher-level abstraction, olm-rs,...

alerter (>=0.3.0, <=0.3.1), maruc (0.1.0) +8 more potentially affected by unknown CVE via olm-sys (1.3.2)

olm-sys CARGO version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on olm-sys and may be impacted: - alerter =0.3.0, =0.2.0, =0.3.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.13.0, =0.1.0, =0.4.0 Source cves: unknown CVE Source advisory:...

New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

Cybersecurity researchers have unpacked the inner workings of a new ransomware variant called Cicada3301 that shares similarities with the now-defunct BlackCat aka ALPHV operation. "It appears that Cicada3301 ransomware primarily targets small to medium-sized businesses SMBs, likely through...

PT-2024-40386 · Olm-Rs +3 · Olm-Rs +3

Name of the Vulnerable Software and Affected Versions: olm-sys affected versions not specified olm-rs affected versions not specified Description: The Matrix Foundation has officially deprecated the libolm library due to several publicly disclosed cryptographic vulnerabilities. As a result,...

CVE-2024-45311

The CVE describes a DoS vulnerability in Quinn’s quinn-proto (v0.11) where calling retry() on an unvalidated connection can cause a panic in certain code paths (e.g., when refute/ignore on the validated connection have a duplicate initial packet, or when decrypting/exhausting connection IDs fails...

alerter (>=0.3.0, <=0.3.1), libmatrix-client (0.0.1) +10 more potentially affected by CVE-2024-45191 +2 more via olm-sys (>=0.1.5, <=1.3.2)

olm-sys CARGO version =0.1.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.1.0, =0.4.0 Source cves: CVE-2024-45191, CVE-2024-45192, CVE-2024-45193 Source advisory: OSV:RUSTSEC-2024-0368...

RUSTSEC-2024-0368 olm-sys: wrapped library unmaintained, potentially vulnerable

After several cryptographic vulnerabilities in libolm were disclosed publicly, the Matrix Foundation has officially deprecated the library. olm-sys is a thin wrapper around libolm and is now deprecated and potentially vulnerable in kind. Users of olm-sys and its higher-level abstraction, olm-rs,...

Quinn 安全漏洞

Quinn is a pure Rust, asynchronous compatible implementation of the IETF QUIC transport protocol from the quinn-rs open source. A security vulnerability exists in Quinn versions 0.11.0 through 0.11.6. An attacker could exploit this vulnerability to cause a denial of service in an application...

a2d (>=0.1.0, <=0.1.11), aaa (>=0.1.0, <=1.1.1) +9845 more potentially affected by unknown CVE via instant (>=0.1.9, <=0.1.13)

instant CARGO version =0.1.9, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0384...

a11ywatch_cli (>=0.0.5, <=0.10.15), a4 (>=0.0.2, <=0.0.4) +11093 more potentially affected by unknown CVE via proc-macro-error (>=0.2.6, <=1.0.4)

proc-macro-error CARGO version =0.2.6, =0.0.5, =0.0.2, =0.3.0, =1.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0370...

CVE-2024-43783

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Instances of the Apollo Router running versions =1.21.0 and =1.7.0 and 1.52.1 are impacted by a denial-of-service vulnerability if all of the...

GHSA-X6XQ-WHH3-GG32 Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

Impact Instances of the Apollo Router using either of the following may be impacted by a denial-of-service vulnerability. 1. External Coprocessing with specific configurations; or 2. Native Rust Plugins accessing the Router request body in the RouterService layer Router customizations using Rhai...

Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

Impact Instances of the Apollo Router using either of the following may be impacted by a denial-of-service vulnerability. 1. External Coprocessing with specific configurations; or 2. Native Rust Plugins accessing the Router request body in the RouterService layer Router customizations using Rhai...

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-43414 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-43414 Source advisory: OSV:GHSA-FMJ9-77Q8-G6C4...

CVE-2024-43783 Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Instances of the Apollo Router running versions =1.21.0 and =1.7.0 and 1.52.1 are impacted by a denial-of-service vulnerability if all of the...

CVE-2024-43783 Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Instances of the Apollo Router running versions =1.21.0 and =1.7.0 and 1.52.1 are impacted by a denial-of-service vulnerability if all of the...

CVE-2024-43783 Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Instances of the Apollo Router running versions =1.21.0 and =1.7.0 and 1.52.1 are impacted by a denial-of-service vulnerability if all of the...