flate2 (>=1.0.29, <=1.0.34), libz-rs-sys (>=0.0.1, <=0.3.1) +1 more potentially affected by unknown CVE via zlib-rs (>=0.0.1, <=0.3.1)

zlib-rs CARGO version =0.0.1, =1.0.29, =0.0.1, =0.3.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0401...

RUSTSEC-2024-0438 Wasmtime doesn't fully sandbox all the Windows device filenames

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-c2f5-jxjv-2hh8. For more information see the GitHub-hosted security advisory...

avery (>=0.1.0, <=0.7.1), bibjoin (>=0.1.2, <=0.2.1) +64 more potentially affected by unknown CVE via fast-float (0.2.0)

fast-float CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on fast-float and may be impacted: - avery =0.1.0, =0.1.2, =0.1.0, =0.13.0, =0.19.0, =0.4.1, =0.6.2, =0.3.2, =0.4.1, =0.3.2, =0.3.2, =0.1.0, =1.0.8, =1.1.0 and more Source cves...

crypt_guard (>=1.2.7, <=1.3.6), crypt_guard_lite (>=0.1.0, <=0.2.2) +11 more potentially affected by unknown CVE via pqcrypto-dilithium (>=0.1.1, <=0.5.0)

pqcrypto-dilithium CARGO version =0.1.1, =1.2.7, =0.1.0, =0.0.1, =0.6.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 - zkswasm 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0380...

clatter (>=0.1.2-alpha, <=2.0.0-rc.1), crypt_guard (>=1.2.7, <=1.3.6) +14 more potentially affected by unknown CVE via pqcrypto-kyber (>=0.1.2, <=0.8.1)

pqcrypto-kyber CARGO version =0.1.2, =0.1.2-alpha, =1.2.7, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.7.0-alpha1, =0.1.2, =0.1.0, =0.23.0, =0.23.0, =12.0.2 - xwing-kem 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0381...

Fedora 40 : rust-pyo3 / rust-pyo3-build-config / rust-pyo3-ffi / etc (2024-23292e9f6d)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-23292e9f6d advisory. Update pyo3 to version 0.22.4. This version addresses a potential use-after-free RUSTSEC-2024-0378. Tenable has extracted the preceding description block...

a2f-mlx (>=0.1.0, <=0.2.0), aa2nucaln (0.1.1) +7199 more potentially affected by unknown CVE via paste (>=0.1.18, <=1.0.15)

paste CARGO version =0.1.18, =0.1.0, =0.1.0, =0.1.1, =0.10.3, =0.9.0, =0.1.4, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0436...

RUSTSEC-2024-0439 Race condition could lead to WebAssembly control-flow integrity and type safety violations

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7qmx-3fpx-r45m. For more information see the GitHub-hosted security advisory...

RUSTSEC-2024-0440 Runtime crash when combining tail calls with stack traces

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q8hx-mm92-4wvg. For more information see the GitHub-hosted security advisory...

lexical-core has multiple soundness issues

RUSTSEC-2024-0377 contains multiple soundness issues: 1. Bytes::read allows creating instances of types with invalid bit patterns 1. BytesIter::read advances iterators out of bounds 1. The BytesIter trait has safety invariants but is public and not marked unsafe 1. writefloat calls...

afarray (>=0.1.0, <=0.1.1), get-size (>=0.1.0, <=0.1.4) +13 more potentially affected by unknown CVE via get-size-derive (>=0.1.2, <=0.1.3)

get-size-derive CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.1, =0.21.0, =0.21.0, =0.1.0, =0.7.0, =0.30.0, =0.30.0, =0.7.0, =0.7.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0427...

Fedora: Security Advisory (FEDORA-2023-eb87748e07)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-638f25a317)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-12f0caa904)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-d88521bfc5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

amaryllis (0.1.0), comiconv (>=0.1.0, <=0.1.2) +19 more potentially affected by unknown CVE via webp (>=0.1.3, <=0.2.6)

webp CARGO version =0.1.3, =0.1.0, =0.24.4, =0.1.0, =0.1.0, =0.1.0, =0.21.0, =0.21.0, =0.21.0, =0.21.0, =0.21.0, =0.21.0, =0.22.1 - sictesting 0.22.0 - snappysc 0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0443...

aquatic_common (0.2.0), core-allocator (>=0.1.0, <=0.1.6) +14 more potentially affected by unknown CVE via hwloc (>=0.3.0, <=0.5.0)

hwloc CARGO version =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6, =6.0.0, =6.0.0, =0.1.1, =0.11.0, =5.0.0, =5.2.2, =18.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0382...

a11ywatch_cli (>=0.0.5, <=0.6.51), a4 (>=0.0.2, <=0.0.4) +7330 more potentially affected by unknown CVE via proc-macro-error (>=0.2.6, <=1.0.4)

proc-macro-error CARGO version =0.2.6, =0.0.5, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.4.0, =0.6.0 - ac-library-rs-expander 0.1.0 - acall-cli 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0370...

anchor-token (>=0.0.1, <=0.3.0), astro4nit (0.0.1) +56 more potentially affected by unknown CVE via cw0 (>=0.2.3, <=0.10.3)

cw0 CARGO version =0.2.3, =0.0.1, =0.3.1, =0.1.0, =0.3.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.6.0-beta1, =0.6.0-beta1, =0.2.0, =0.2.1, =0.2.0, =0.10.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0385...

databend-common-ast (>=0.0.0, <=0.0.2), logcall (>=0.1.7, <=0.1.9) +2 more potentially affected by unknown CVE via minitrace (>=0.3.1, <=0.6.7)

minitrace CARGO version =0.3.1, =0.0.0, =0.1.7, =0.6.4, =0.3.0, =0.6.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0390...