afterglow (>=0.1.0 <=0.3.0), aiid_js (=0.0.1) +47 more potentially affected by unknown CVE via bumpalo (=2.6.0)

bumpalo CARGO version =2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on bumpalo and may be impacted: - afterglow =0.1.0, =0.5.4, =0.1.0, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.6.1 and more Source cves: unkno...

afterglow (>=0.1.0 <=0.3.0), aiid_js (=0.0.1) +47 more potentially affected by unknown CVE via bumpalo (=2.6.0)

bumpalo CARGO version =2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on bumpalo and may be impacted: - afterglow =0.1.0, =0.5.4, =0.1.0, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.6.1 and more Source cves: unkno...

UBUNTU-CVE-2020-35861

An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys...

ABC_Game_Engine (>=0.1.0 <=0.1.2), AskAI (=0.1.0) +42402 more potentially affected by CVE-2020-35861 via bumpalo (>=3.14.0 <=3.20.3)

bumpalo CARGO version =3.14.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.6, =0.0.0, =0.1.2, =0.0.0, =0.1.0-beta.1, =0.0.8, =0.1.15 and more Source cves: CVE-2020-35861 Source advisory: OSV:RUSTSEC-2020-0006...