a2d (>=0.1.0, <=0.1.11), abci-storage (0.0.3) +1567 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.1, =0.1.0, =0.1.0, =0.1.2 - acutescenes 0.1.0 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-PPJ3-7JW3-8VC4...

GHSA-RH7X-PPXX-P34C Insufficient size checks in ws

An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack...

GHSA-HHW2-PQHF-VMX2 Use after free in actix-utils

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

Use after free in actix-service

An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

GHSA-WHC7-5P35-4WW2 Use after free in actix-service

An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

Path traversal in mozwire

An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename...

GHSA-4VHW-4RW7-JFPV Path traversal in mozwire

An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename...

Double free in alpm-rs

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...

kea (0.1.0) potentially affected by CVE-2020-35885 via alpm-rs (0.1.24)

alpm-rs CARGO version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on alpm-rs and may be impacted: - kea 0.1.0 Source cves: CVE-2020-35885 Source advisory: OSV:GHSA-QC4M-GC8R-MG8M...

abrute (>=0.1.7, <=0.1.9), alipay-rs (>=0.2.0, <=0.4.6) +57 more potentially affected by CVE-2020-35884 via tiny_http (>=0.4.1, <=0.7.0)

tinyhttp CARGO version =0.4.1, =0.1.7, =0.2.0, =0.0.1, =0.1.0, =0.0.1, =0.15.7, =0.1.0, =0.7.0, =0.1.1, =0.1.0, =1.0.0, =3.1.0 - ewer 0.0.2 - fatcat-openapi 0.3.1 and more Source cves: CVE-2020-35884 Source advisory: OSV:GHSA-7V2R-WXMG-MGVC...

GHSA-M833-JV95-MFJH Memory safety violation in crayon

An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike...

xxlib (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-35890 +1 more via ordnung (0.0.1)

ordnung CARGO version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ordnung and may be impacted: - xxlib =0.1.0, =0.4.0 Source cves: CVE-2020-35890, CVE-2020-35891 Source advisory: OSV:GHSA-4WJ3-P7HJ-CVX8...

Out of bounds read in ordnung

An issue was discovered in the ordnung crate through version 0.0.1 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capacity...

GHSA-QRWC-JXF5-G8X6 Out of bounds read in ordnung

An issue was discovered in the ordnung crate through version 0.0.1 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capacity...

xxlib (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-35890 +1 more via ordnung (0.0.1)

ordnung CARGO version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ordnung and may be impacted: - xxlib =0.1.0, =0.4.0 Source cves: CVE-2020-35890, CVE-2020-35891 Source advisory: OSV:GHSA-QRWC-JXF5-G8X6...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:GHSA-438G-FX34-4H9M...

Out of bounds read in simple-slab

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...

GHSA-438G-FX34-4H9M Out of bounds read in simple-slab

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index allows an out-of-bounds read...

Off-by-one error in simple-slab

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:GHSA-HQC8-J86X-2764...