10808 matches found
CVE-2023-45812
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...
CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...
CVE-2023-45812
CVE-2023-45812 affects Apollo Router (Rust). A DoS can occur when handling multi-part responses if the client uses queries with @defer or Subscriptions and the router is configured with a coprocessor level coprocessor.supergraph.response in router.yaml. The vulnerability can cause the router to p...
CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...
CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router
The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service DoS type vulnerability which causes the Router to panic and terminate when a multi-part response is...
agora (0.1.0), ashpd (>=0.2.0-alpha, <=0.2.0-alpha-3) +30 more potentially affected by CVE-2024-43806 via rustix (>=0.37.3, <=0.37.13)
rustix CARGO version =0.37.3, =0.2.0-alpha, =0.2.0, =1.0.2, =0.6.0, =0.4.0, =0.2.0, =0.2.0-beta.4, =0.25.0, =0.25.1 and more Source cves: CVE-2024-43806 Source advisory: OSV:GHSA-C827-HFW6-QWVM...
a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.7.0, <=0.10.15) +6764 more potentially affected by CVE-2024-43806 via rustix (>=0.38.9, <=0.38.10)
rustix CARGO version =0.38.9, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.0.1, =0.3.1, =0.2.4, =0.1.0, =0.1.0, =0.1.8 and more Source cves: CVE-2024-43806 Source advisory: OSV:GHSA-C827-HFW6-QWVM...
reef (>=0.0.46, <=0.0.82) potentially affected by CVE-2024-21530 via cocoon (>=0.2.5, <=0.3.3)
cocoon CARGO version =0.2.5, =0.0.46, =0.0.82 Source cves: CVE-2024-21530 Source advisory: OSV:RUSTSEC-2023-0068...
AZL-35242 CVE-2023-45853 affecting package rust for versions less than 1.75.0-1
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...
AZL-61279 CVE-2023-45853 affecting package rust for versions less than 1.85.0-1
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...
AZL-31496 CVE-2023-45853 affecting package rust for versions less than 1.72.0-5
MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...
amadeus (>=0.3.5, <=0.4.3), amadeus-parquet (>=0.3.5, <=0.4.3) +102 more potentially affected by unknown CVE via fehler (1.0.0)
fehler CARGO version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on fehler and may be impacted: - amadeus =0.3.5, =0.3.5, =0.9.0, =0.9.0, =1.0.0, =0.0.2, =0.7.0, =0.5.0, =0.1.0, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source...
CVE-2023-28320 affecting package rust for versions less than 1.72.0-2
CVE-2023-28320 affecting package rust for versions less than 1.72.0-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-28319 affecting package rust for versions less than 1.72.0-2
CVE-2023-28319 affecting package rust for versions less than 1.72.0-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-27534 affecting package rust for versions less than 1.72.0-2
CVE-2023-27534 affecting package rust for versions less than 1.72.0-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-27533 affecting package rust for versions less than 1.72.0-2
CVE-2023-27533 affecting package rust for versions less than 1.72.0-2. An upgraded version of the package is available that resolves this issue...
CVE-2023-0286 affecting package rust for versions less than 1.72.0-2
CVE-2023-0286 affecting package rust for versions less than 1.72.0-2. This CVE either no longer is or was never applicable...
CVE-2023-23915 affecting package rust for versions less than 1.72.0-2
CVE-2023-23915 affecting package rust for versions less than 1.72.0-2. An upgraded version of the package is available that resolves this issue...