12760 matches found
ansi2png-rs (>=0.1.0, <=0.1.1), artano (>=0.2.9, <=0.3.5) +73 more potentially affected by CVE-2020-35879 via rulinalg (0.4.2)
rulinalg CARGO version 0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on rulinalg and may be impacted: - ansi2png-rs =0.1.0, =0.2.9, =14.1.0, =0.1.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =0.3.2, =0.1.0, =0.1.0, =0.2.1 and more Source cves: CVE-2020-3587...
Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +51 more potentially affected by CVE-2020-35880 via bigint (4.4.3)
bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.3.0, =0.2.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0 and more Source cves:...
GHSA-WGX2-6432-J3FW Unsoundness in bigint
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation...
GHSA-J79J-CX3H-G27H Out of bounds write in traitobject
An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x...
acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +685 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.0.3)
traitobject CARGO version =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.1.0, =0.5.0, =0.6.5 - arubaripple 0.0.1 and more Source cves: CVE-2020-35881 Source advisory: OSV:GHSA-J79J-CX3H-G27H...
Out of bounds write in traitobject
An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x...
Data races in rusqlite
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor...
a3mo_lib (>=0.1.0, <=0.1.1), alfred-workflow (>=1.0.0, <=1.1.0) +107 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)
rusqlite CARGO version =0.2.0, =0.1.0, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =0.4.0, =0.1.0, =0.9.2, =0.4.4, =1.0.0 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...
a3mo_lib (>=0.1.0, <=0.1.1), alfred-workflow (>=1.0.0, <=1.1.0) +107 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)
rusqlite CARGO version =0.2.0, =0.1.0, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =0.4.0, =0.1.0, =0.9.2, =0.4.4, =1.0.0 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...
GHSA-Q948-X8RF-888M os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`
The Windows implementation of this crate relied on the behavior of std::char::fromu32unchecked when its safety clause is violated. Even though this worked with Rust versions up to 1.42 at least, that behavior could change with any new Rust version, possibly leading a security issue. The flaw was...
Data races in rusqlite
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification...
GHSA-3CGF-9M6X-PWWR Data races in rusqlite
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification...
a3mo_lib (>=0.1.0, <=0.1.1), alfred-workflow (>=1.0.0, <=1.1.0) +107 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)
rusqlite CARGO version =0.2.0, =0.1.0, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =0.4.0, =0.1.0, =0.9.2, =0.4.4, =1.0.0 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...
Use after free in rusqlite
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free...
GHSA-8H4J-VM3R-VCQ3 Use after free in rusqlite
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free...
Out of bounds read in Ozone
An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of out-of-bounds access...
GHSA-P2Q9-9CQ6-H3JW Out of bounds read in Ozone
An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of out-of-bounds access...