bat (0.18.0), buffett-metrics (>=0.1.0, <=0.1.3) +22 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =2.1.0-beta-0, =0.7.0, =0.7.0, =0.7.0, =0.3.4, =1.0.7, =0.1.0, =0.9.0, =0.11.3 and more Source cves: CVE-2020-36434 Source advisory: OSV:RUSTSEC-2020-0100...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +51 more potentially affected by CVE-2020-35880 via bigint (>=1.0.5, <=4.4.3)

bigint CARGO version =1.0.5, =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.3.0, =0.1.2, =0.1.0, =0.1.0, =0.3.2, =0.0.0, =0.1.0 and more Source cves: CVE-2020-35880 Source advisory: OSV:RUSTSEC-2020-0025...

a3mo_lib (>=0.1.0, <=0.1.1), aaa_csv_challenge (0.1.0) +3542 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0, <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.0.1, =0.1.0-pre.1, =0.5.0, =0.3.0, =0.3.0-alpha.1, =0.2.0, =0.3.1 - accurate 0.3.0 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:RUSTSEC-2020-0036...

a2d (>=0.1.0, <=0.1.11), abstract-ns (>=0.2.1, <=0.3.2) +1279 more potentially affected by unknown CVE via net2 (0.2.39)

net2 CARGO version 0.2.39 is affected by a known vulnerability. The following packages have a transitive dependency on net2 and may be impacted: - a2d =0.1.0, =0.2.1, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.0.5, =0.0.6 - afio 0.1.0 - agilulf 0.1.0 - agilulfdriver 0.1.0 - agilulfprotocol 0.1.0 ...

a2d (>=0.1.0, <=0.1.11), aart (>=0.1.0, <=0.1.1) +521 more potentially affected by unknown CVE via stb_truetype (>=0.1.2, <=0.3.1)

stbtruetype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0020...

aiowrap (0.1.0), ambisonic (>=0.1.0, <=0.3.1) +117 more potentially affected by unknown CVE via slice-deque (>=0.1.16, <=0.3.0)

slice-deque CARGO version =0.1.16, =0.1.0, =0.5.0, =0.1.0, =0.8.0, =0.3.0, =0.8.0, =0.4.0, =0.6.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0158...

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +624 more potentially affected by unknown CVE via lzw (>=0.5.0, <=0.10.0)

lzw CARGO version =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =0.6.0, =0.7.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0144...

lightbeam (>=0.7.0, <=0.15.0), llama-wasm (>=0.1.0, <=0.5.0) +1 more potentially affected by unknown CVE via multi_mut (0.1.3)

multimut CARGO version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on multimut and may be impacted: - lightbeam =0.7.0, =0.1.0, =0.7.0, =0.15.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0169...

bincrypt (>=0.3.0, <=0.3.1), fcp_cryptoauth (>=0.1.0, <=0.4.0) +9 more potentially affected by unknown CVE via rust_sodium (>=0.1.2, <=0.10.2)

rustsodium CARGO version =0.1.2, =0.3.0, =0.1.0, =0.0.1-alpha1, =0.1.0, =0.1.0, =1.0.0, =1.0.1 - rncryptor 0.1.0 - rust-blockchain 0.1.0 - selfencryption 0.15.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0003...

maidsafe_client (>=0.1.0, <=0.1.2), maidsafe_types (>=0.0.9, <=0.2.3) +8 more potentially affected by unknown CVE via crust (>=0.0.3, <=0.4.2)

crust CARGO version =0.0.3, =0.1.0, =0.0.9, =0.0.3, =0.0.6, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0032...

RUSTSEC-2019-0024 Test advisory with associated example crate

This is a test advisory useful for verifying RustSec tooling and vulnerability detection pipelines are working correctly. Aside from the fact that it is filed against an example crate, it is otherwise considered by the Advisory Database itself to be a normal security advisory. It's filed against...

Test advisory with associated example crate

This is a test advisory useful for verifying RustSec tooling and vulnerability detection pipelines are working correctly. Aside from the fact that it is filed against an example crate, it is otherwise considered by the Advisory Database itself to be a normal security advisory. It's filed against...

PT-2019-20180

Name of the Vulnerable Software and Affected Versions rustsec-example-crate version 0.0.1 Description This issue is a test advisory for verifying the functionality of RustSec tooling and vulnerability detection pipelines. It is filed against the rustsec-example-crate, which is an empty crate with...

aerospike (0.3.0), ag (>=0.7.5, <=0.7.6) +223 more potentially affected by CVE-2019-15553 via memoffset (>=0.1.0, <=0.2.1)

memoffset CARGO version =0.1.0, =0.7.5, =0.2.5, =0.4.0, =0.6.0, =0.5.0, =0.4.0, =0.5.0, =0.6.0, =0.7.0, =0.3.0, =0.3.0, =0.1.0, =0.6.0, =0.7.0 and more Source cves: CVE-2019-15553 Source advisory: OSV:RUSTSEC-2019-0011...

buf-ref-reader (0.3.0), buf_redux (>=0.7.0, <=0.8.1) +8 more potentially affected by CVE-2019-15543 via slice-deque (0.1.16)

slice-deque CARGO version 0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on slice-deque and may be impacted: - buf-ref-reader 0.3.0 - bufredux =0.7.0, =0.1.0, =0.2.0, =0.1.0, =0.12.0, =0.14.0 - reactive-rs 0.1.1 - rtplot 0.2.0 - seqio 0.3.0 Source...

accepted (>=0.2.0, <=0.3.1), aigc_keychain (5.1.2) +308 more potentially affected by unknown CVE via typemap (0.3.3)

typemap CARGO version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.3.2, =0.0.1, =0.5.0, =0.1.3, =0.1.0, =0.0.1, =0.8.0 and more Source cves: unknown CVE Source advisory:...

aw-fel (>=0.1.0, <=0.5.2), blinkrs (>=0.1.0, <=1.0.0) +27 more potentially affected by unknown CVE via libusb (>=0.2.2, <=0.3.0)

libusb CARGO version =0.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0-alpha.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 - lfcl 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2016-0004...

ace-test-lib (0.1.0), ace_rust_demo (0.1.0) +503 more potentially affected by unknown CVE via rust-crypto (0.2.36)

rust-crypto CARGO version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - ace-test-lib 0.1.0 - acerustdemo 0.1.0 - aerospike =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.3.5, =0.9.0, =0.1.0, =0.1....

aerial (0.1.0), afterparty (0.1.0) +334 more potentially affected by CVE-2016-10932 via hyper (>=0.0.1, <=0.8.1)

hyper CARGO version =0.0.1, =0.7.0, =0.1.0, =0.1.3, =0.5.1, =0.1.2, =0.5.3, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2016-10932 Source advisory: OSV:RUSTSEC-2016-0002...