diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

bloguen (>=0.1.0, <=0.1.1), cargo-docco (0.1.0) +25 more potentially affected by CVE-2021-27671 via comrak (>=0.1.9, <=0.8.2)

comrak CARGO version =0.1.9, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.0.1, =0.0.5, =1.0.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-27671 Source advisory: OSV:RUSTSEC-2021-0026...

axosnake (>=0.1.0, <=0.1.4), bevy_rapier2d (>=0.1.1, <=0.4.0) +20 more potentially affected by unknown CVE via ncollide2d (>=0.15.4, <=0.33.0)

ncollide2d CARGO version =0.15.4, =0.1.0, =0.1.1, =0.0.0, =0.18.0, =0.0.1, =0.1.0, =0.15.3, =0.8.0, =0.4.0, =0.5.0, =0.5.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0151...

basic_dsp (>=0.4.0, <=0.8.2) potentially affected by CVE-2021-25906 via basic_dsp_matrix (>=0.4.3, <=0.8.1)

basicdspmatrix CARGO version =0.4.3, =0.4.0, =0.8.2 Source cves: CVE-2021-25906 Source advisory: OSV:RUSTSEC-2021-0009...

financ (>=0.1.0, <=0.3.0), fitparser (>=0.1.0, <=0.5.1) +8 more potentially affected by CVE-2021-26951 via calamine (>=0.11.8, <=0.16.2)

calamine CARGO version =0.11.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.0.1, =0.1.0, =0.3.3 Source cves: CVE-2021-26951 Source advisory: OSV:RUSTSEC-2021-0015...

ahrightos-kernel (0.1.0), bootloader (>=0.10.0-alpha-01, <=0.10.13) +2 more potentially affected by CVE-2020-36208 via conquer-once (0.2.1)

conquer-once CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on conquer-once and may be impacted: - ahrightos-kernel 0.1.0 - bootloader =0.10.0-alpha-01, =0.14.0, =0.1.0, =0.2.6 Source cves: CVE-2020-36208 Source advisory:...

app (>=0.2.0, <=0.6.5), bench_timer (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via stderr (>=0.2.2, <=0.8.0)

stderr CARGO version =0.2.2, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0109...

timeout_io (>=0.2.0, <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (0.3.2)

tinyfuture CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:RUSTSEC-2020-0118...

safe_dns (0.3.0), safe_launcher (0.1.0) +1 more potentially affected by unknown CVE via safe_core (0.3.0)

safecore CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on safecore and may be impacted: - safedns 0.3.0 - safelauncher 0.1.0 - safenfs 0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0086...

alkyne (0.1.0), dioxus-core (0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0, <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +28 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:RUSTSEC-2020-0068...

maidsafe_client (>=0.1.0, <=0.1.2), maidsafe_types (>=0.0.9, <=0.2.3) +8 more potentially affected by unknown CVE via routing (>=0.0.9, <=0.4.1)

routing CARGO version =0.0.9, =0.1.0, =0.0.9, =0.0.3, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0076...

RUSTSEC-2020-0055 Please see RUSTSEC-2018-0020

This vulnerability was misfiled under the wrong year and has been withdrawn...

Please see RUSTSEC-2018-0020

This vulnerability was misfiled under the wrong year and has been withdrawn...

cargo-audit (>=0.3.0, <=0.4.0) potentially affected by unknown CVE via rustsec (>=0.7.5, <=0.8.0)

rustsec CARGO version =0.7.5, =0.3.0, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0051...

RUSTSEC-2020-0051 Obsolete versions of the `rustsec` crate do not support the new V3 advisory format

If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...

Obsolete versions of the `rustsec` crate do not support the new V3 advisory format

If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...

mozjpeg DecompressScanlines::read_scanlines is Unsound

This issue and vector is similar to RUSTSEC-2020-0029 of rgb crate which mozjpeg depends on. Affected versions of mozjpeg crate allow creating instances of any type T from bytes, and do not correctly constrain T to the types for which it is safe to do so. Examples of safety violation possible for...

arsdk-rs (>=0.0.2, <=0.0.5), burritun (>=0.1.0, <=0.1.1) +41 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.0.2, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6, =0.0.1, =0.3.0, =0.5.1 - jumpingsumo-rs 0.0.2 - kipa 0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0167...

accepted (>=0.2.0, <=0.3.1), acme-client (>=0.1.0, <=0.2.0) +1501 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.2.0, =0.4.6 and more Source cves: CVE-2020-35881 Source advisory: OSV:RUSTSEC-2020-0027...