term-handler (=0.1.0) potentially affected by CVE-2020-36446 via signal-simple (=0.1.1)

signal-simple CARGO version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on signal-simple and may be impacted: - term-handler =0.1.0 Source cves: CVE-2020-36446 Source advisory: OSV:GHSA-36CG-4JFF-5863...

async-coap-tokio (=0.1.0) potentially affected by CVE-2020-36444 via async-coap (=0.1.0)

async-coap CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-coap and may be impacted: - async-coap-tokio =0.1.0 Source cves: CVE-2020-36444 Source advisory: OSV:GHSA-9J8Q-M9X5-9G6J...

amethyst (>=0.5.0 <=0.5.1), specs (>=0.8.0 <=0.8.1) potentially affected by CVE-2020-36439 via ticketed_lock (=0.1.0)

ticketedlock CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ticketedlock and may be impacted: - amethyst =0.5.0, =0.8.0, =0.8.1 Source cves: CVE-2020-36439 Source advisory: OSV:GHSA-77M6-X95J-75R5...

timeout_io (>=0.2.0 <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (=0.3.2)

tinyfuture CARGO version =0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:GHSA-FG42-VWXX-XX5J...

NeteaseCloudMusicRustApi (=0.1.1), RustMusic (=0.1.0) +313 more potentially affected by CVE-2021-38512 via actix-http (>=0.1.5 <=1.0.1)

actix-http CARGO version =0.1.5, =0.1.0, =0.8.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-38512 Source advisory: OSV:GHSA-8928-2FGM-6X9X...

ruspiro-boot (>=0.3.0 <=0.3.2), ruspiro-console (>=0.0.2 <=0.3.2) +6 more potentially affected by CVE-2020-36435 via ruspiro-singleton (>=0.0.2 <=0.3.1)

ruspiro-singleton CARGO version =0.0.2, =0.3.0, =0.0.2, =0.0.2, =0.3.0, =0.1.0, =0.0.2, =0.4.0, =0.0.2, =0.3.1 Source cves: CVE-2020-36435 Source advisory: OSV:GHSA-FQQ2-XP7M-XVM8...

kay (>=0.1.0 <=0.5.1) potentially affected by CVE-2020-36433 via chunky (>=0.1.4 <=0.3.7)

chunky CARGO version =0.1.4, =0.1.0, =0.5.1 Source cves: CVE-2020-36433 Source advisory: OSV:GHSA-QG24-8XJ4-GJ2H...

alkyne (=0.1.0), dioxus-core (=0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0 <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 =0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:GHSA-2R6Q-6C8C-G762...

rustracts (=0.2.0) potentially affected by CVE-2020-36454 via parc (=1.0.1)

parc CARGO version =1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on parc and may be impacted: - rustracts =0.2.0 Source cves: CVE-2020-36454 Source advisory: OSV:GHSA-29V7-3V4C-GF38...

AskAI (=0.1.0), Boa (>=0.1.4 <=0.1.5) +7100 more potentially affected by CVE-2020-26235 via time (>=0.1.25 <=0.2.22)

time CARGO version =0.1.25, =0.1.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.1 - ablavema =0.4.2 - abra =0.0.1 and more Source cves: CVE-2020-26235 Source advisory: OSV:GHSA-WCG3-CVX6-7396...

Rusty_CryptoAuthLib (>=0.1.0 <=1.0.0), accelerometer (=0.3.0) +272 more potentially affected by CVE-2020-36464 via heapless (>=0.2.7 <=0.5.6)

heapless CARGO version =0.2.7, =0.1.0, =0.1.2, =0.1.0, =0.2.1, =0.3.5, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.2.0 and more Source cves: CVE-2020-36464 Source advisory: OSV:GHSA-QGWF-R2JJ-2CCV...

ABC-ECS (>=0.1.0 <=0.1.2), VigilantLamp (>=0.0.1 <=0.0.3) +284 more potentially affected by CVE-2021-38187 via anymap (>=0.10.3 <=0.12.1)

anymap CARGO version =0.10.3, =0.1.0, =0.0.1, =0.1.6, =0.1.0-alpha.2, =0.8.0, =0.1.0, =5.0.0, =5.2.2, =0.0.1-alpha+3, =0.1.1, =0.1.1, =0.1.0, =0.1.1, =0.1.1, =0.1.2 and more Source cves: CVE-2021-38187 Source advisory: OSV:GHSA-HC92-9H3M-C39J...

endian_trait_derive (>=0.2.0 <=0.4.0) potentially affected by CVE-2021-29929 via endian_trait (>=0.2.0 <=0.3.0)

endiantrait CARGO version =0.2.0, =0.2.0, =0.4.0 Source cves: CVE-2021-29929 Source advisory: OSV:GHSA-VPW8-43WM-RXW5...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-3449 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-3449 Source advisory: OSV:GHSA-83MX-573X-5RW9...

booklibrs (>=0.1.0 <=1.1.6), boostvoronoi (>=0.4.2 <=0.6.0) +8 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.13.15 <=0.15.15)

fltk CARGO version =0.13.15, =0.1.0, =0.4.2, =0.3.1, =0.2.0, =0.1.0, =0.1.9, =0.1.0, =0.0.5, =0.1.1, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:GHSA-7QCC-G2M9-8533...

addr2line (=0.6.0), backtrace (>=0.3.6 <=0.3.9) +11 more potentially affected by CVE-2021-25901 via lazy-init (>=0.1.1 <=0.3.0)

lazy-init CARGO version =0.1.1, =0.3.6, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2021-25901 Source advisory: OSV:GHSA-W47J-HQPF-QW9W...

airust (=0.1.6), font (>=0.2.0 <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.10.1 <=0.11.1)

postscript CARGO version =0.10.1, =0.2.0, =0.0.2, =0.1.0, =0.15.0, =0.1.0, =0.6.3 - text =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:GHSA-FHVC-GP6C-H2WX...

openssl-sys (>=0.9.35 <=0.9.37) potentially affected by CVE-2021-23841 via openssl-src (=110.0.7+1.1.0i)

openssl-src CARGO version =110.0.7+1.1.0i is affected by a known vulnerability. The following packages have a transitive dependency on openssl-src and may be impacted: - openssl-sys =0.9.35, =0.9.37 Source cves: CVE-2021-23841 Source advisory: OSV:GHSA-84RM-QF37-FGC2...

fac (>=0.5.2 <=0.5.3) potentially affected by CVE-2021-28037 via internment (=0.3.13)

internment CARGO version =0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:GHSA-GPPW-3H6H-V6Q2...

zdd (=0.2.0) potentially affected by CVE-2020-36215 via hashconsing (=0.10.3)

hashconsing CARGO version =0.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on hashconsing and may be impacted: - zdd =0.2.0 Source cves: CVE-2020-36215 Source advisory: OSV:GHSA-RW2C-C256-3R53...