buf (>=0.1.0, <=0.2.1), i-o (>=0.1.0, <=0.4.1) +2 more potentially affected by CVE-2021-25907 via containers (>=0.1.1, <=0.8.5)

containers CARGO version =0.1.1, =0.1.0, =0.1.0, =0.13.0, =0.14.1 - lude 0.1.0 Source cves: CVE-2021-25907 Source advisory: OSV:GHSA-CV7X-6RC6-PQ5V...

bellperson (>=0.3.4, <=0.15.0), ff-cl-gen (>=0.1.0, <=0.3.0) +10 more potentially affected by CVE-2021-25908 via fil-ocl (0.19.6)

fil-ocl CARGO version 0.19.6 is affected by a known vulnerability. The following packages have a transitive dependency on fil-ocl and may be impacted: - bellperson =0.3.4, =0.1.0, =5.0.0, =5.0.0, =2.3.0, =0.1.0, =0.1.0, =5.0.0, =5.4.0, =5.0.0, =5.0.0, =0.1.1, =0.1.2 Source cves: CVE-2021-25908...

amethyst (>=0.11.0, <=0.15.3), amethyst-console (0.1.0) +22 more potentially affected by CVE-2021-25902 via glsl-layout (0.3.2)

glsl-layout CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on glsl-layout and may be impacted: - amethyst =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.6.0, =0.6.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves:...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2021-28037 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:GHSA-GPPW-3H6H-V6Q2...

font (>=0.0.2, <=0.3.2), msdfgen (0.1.0) +2 more potentially affected by CVE-2021-28030 via truetype (>=0.3.0, <=0.22.0)

truetype CARGO version =0.3.0, =0.0.2, =0.4.3, =0.0.2, =0.0.4 Source cves: CVE-2021-28030 Source advisory: OSV:GHSA-V7Q4-97X4-4QW2...

acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +81 more potentially affected by CVE-2020-36204 via im (>=12.3.4, <=15.0.0)

im CARGO version =12.3.4, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.1.1, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2020-36204 Source advisory: OSV:GHSA-Q9H2-4XHF-23XX...

aoa (0.1.0), blinkrs (1.0.1) +32 more potentially affected by CVE-2020-36206 via rusb (>=0.4.0, <=0.6.5)

rusb CARGO version =0.4.0, =0.2.0, =0.6.0, =0.2.0, =0.1.0, =1.0.0-alpha.2, =0.1.0, =0.1.0, =1.0.0, =0.4.0, =0.5.0, =0.1.0, =0.1.5 and more Source cves: CVE-2020-36206 Source advisory: OSV:GHSA-9MXW-4856-9CM5...

efw (0.1.0) potentially affected by CVE-2020-36209 via late-static (0.3.0)

late-static CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on late-static and may be impacted: - efw 0.1.0 Source cves: CVE-2020-36209 Source advisory: OSV:GHSA-WR55-MF5C-HHWM...

curl (>=0.4.7, <=0.4.8), dns-lookup (>=0.7.0, <=0.8.1) +5 more potentially affected by CVE-2020-35919 +1 more via socket2 (0.2.4)

socket2 CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on socket2 and may be impacted: - curl =0.4.7, =0.7.0, =0.3.0-beta.1, =0.1.0, =0.2.2, =0.2.4 - miow 0.3.0 Source cves: CVE-2020-35919, CVE-2020-35920 Source advisory:...

adi (>=0.4.0, <=0.6.0), adi_screen (>=0.3.0, <=0.7.0) +119 more potentially affected by CVE-2020-35923 via ordered-float (>=0.2.3, <=1.0.2)

ordered-float CARGO version =0.2.3, =0.4.0, =0.3.0, =0.7.5, =0.2.0, =3.1.3, =0.1.1, =0.9.0, =0.0.10, =0.1.2, =0.0.2, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-35923 Source advisory: OSV:GHSA-566X-HHRF-QF8M...

async-metronome (0.2.0), bach (>=0.0.1, <=0.0.2) +18 more potentially affected by CVE-2020-35926 via nanorand (0.4.4)

nanorand CARGO version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - async-metronome 0.2.0 - bach =0.0.1, =0.8.6, =0.1.0, =0.1.0, =0.4.3, =0.1.0, =0.0.1, =0.1.3, =0.1.4 - rune-cli 0.7.0 and more Source cves:...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5215 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-VH4P-6J7G-F4J9...

accumulator (0.3.0), bing-rs (>=0.0.2, <=0.0.4) +47 more potentially affected by CVE-2020-35896 via ws (>=0.4.8, <=0.8.1)

ws CARGO version =0.4.8, =0.0.2, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =11.0.0, =0.5.0, =0.2.6, =0.2.9 - magic-wormhole 0.0.1 and more Source cves: CVE-2020-35896 Source advisory: OSV:GHSA-RH7X-PPXX-P34C...

kea (>=0.1.0, <=0.1.3) potentially affected by CVE-2020-35885 via alpm-rs (0.1.24)

alpm-rs CARGO version 0.1.24 is affected by a known vulnerability. The following packages have a transitive dependency on alpm-rs and may be impacted: - kea =0.1.0, =0.1.3 Source cves: CVE-2020-35885 Source advisory: OSV:GHSA-QC4M-GC8R-MG8M...

abrute (>=0.1.7, <=0.1.9), alipay-rs (>=0.2.0, <=0.4.6) +94 more potentially affected by CVE-2020-35884 via tiny_http (>=0.4.1, <=0.7.0)

tinyhttp CARGO version =0.4.1, =0.1.7, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =0.1.5, =0.1.1, =0.15.7, =0.1.0, =0.1.0, =0.1.17 and more Source cves: CVE-2020-35884 Source advisory: OSV:GHSA-7V2R-WXMG-MGVC...

xxlib (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-35890 +1 more via ordnung (0.0.1)

ordnung CARGO version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ordnung and may be impacted: - xxlib =0.1.0, =0.4.0 Source cves: CVE-2020-35890, CVE-2020-35891 Source advisory: OSV:GHSA-4WJ3-P7HJ-CVX8...

xxlib (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-35890 +1 more via ordnung (0.0.1)

ordnung CARGO version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ordnung and may be impacted: - xxlib =0.1.0, =0.4.0 Source cves: CVE-2020-35890, CVE-2020-35891 Source advisory: OSV:GHSA-QRWC-JXF5-G8X6...

anchor-token (>=0.0.1, <=0.3.0), astroport (>=3.6.1, <=3.12.2) +93 more potentially affected by CVE-2020-35880 via bigint (4.4.3)

bigint CARGO version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on bigint and may be impacted: - anchor-token =0.0.1, =3.6.1, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1 - csepicwalletapi 1.0.0 - csepicwalletconfig 1.0.0 and...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +693 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.0.3)

traitobject CARGO version =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.1.0, =0.5.0, =0.6.5 - arubaripple 0.0.1 and more Source cves: CVE-2020-35881 Source advisory: OSV:GHSA-J79J-CX3H-G27H...

a3mo_lib (>=0.1.0, <=0.1.1), acid-store (>=0.1.0, <=0.11.2) +167 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.11, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.40.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =1.2.5 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...