a3mo_lib (>=0.1.0, <=0.1.1), alfred-workflow (>=1.0.0, <=1.1.0) +107 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =0.4.0, =0.1.0, =0.9.2, =0.4.4, =1.0.0 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

Drop of uninitialized memory in Ozone

An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of the dropping of uninitialized memory...

GHSA-M3WW-7HRP-GW9W Drop of uninitialized memory in Ozone

An issue was discovered in the ozone crate through version 0.1.0 for Rust. Memory safety is violated because of the dropping of uninitialized memory...

GHSA-7CJC-HVXF-GQH7 Use after free and double free in bitvec

An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free...

Dangling reference in flatbuffers

An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. readscalar and readscalarat can transmute values without unsafe blocks...

NULL Pointer Dereference in cbox

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code...

GHSA-3VJM-36RR-7QRQ NULL Pointer Dereference in cbox

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code...

GHSA-VQX7-PW4R-29RR Out of bounds read in bumpalo

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

Out of bounds read in bumpalo

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

GHSA-G4W7-3QR8-5623 Improper type usage in rusqlite

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the reprRust type...

a3mo_lib (>=0.1.0, <=0.1.1), alfred-workflow (>=1.0.0, <=1.1.0) +107 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =0.4.0, =0.1.0, =0.9.2, =0.4.4, =1.0.0 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

a3mo_lib (>=0.1.0, <=0.1.1), alfred-workflow (>=1.0.0, <=1.1.0) +107 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =0.4.0, =0.1.0, =0.9.2, =0.4.4, =1.0.0 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

GHSA-RJH8-P66P-JRH5 Data races in rusqlite

An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race...

GHSA-8RC5-MR4F-M243 Use after free in rio

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2020-35874 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2020-35874 Source advisory: OSV:GHSA-96W3-P368-4H8C...

arrow (>=0.14.0, <=0.15.1), blockbuffers (0.1.0) +9 more potentially affected by CVE-2019-25004 via flatbuffers (>=0.4.0, <=0.5.0)

flatbuffers CARGO version =0.4.0, =0.14.0, =0.1.8, =0.1.0, =0.0.5, =3.0.0, =1.0.0, =1.1.2, =1.2.0, =1.3.2 Source cves: CVE-2019-25004 Source advisory: OSV:GHSA-GX73-2498-R55C...

GHSA-GX73-2498-R55C Unsound casting in flatbuffers

The implementation of impl Follow for bool allows to reinterpret arbitrary bytes as a bool. In Rust bool has stringent requirements for its in-memory representation. Use of this function allows to violate these requirements and invoke undefined behaviour in safe code...

Double free in http

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness...

Rust Failure Crate Vulnerable to Type confusion

Safe Rust code can implement malfunctioning privategettypeid and cause type confusion when downcasting, which is an undefined behavior. Users who derive Fail trait are not affected...

GHSA-R98R-J25Q-RMPR Rust Failure Crate Vulnerable to Type confusion

Safe Rust code can implement malfunctioning privategettypeid and cause type confusion when downcasting, which is an undefined behavior. Users who derive Fail trait are not affected...