actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +321 more potentially affected by unknown CVE via unic-common (>=0.7.0, <=0.9.0)

unic-common CARGO version =0.7.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0080...

rust-network-mgr (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via nftnl (0.7.0)

nftnl CARGO version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nftnl and may be impacted: - rust-network-mgr =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0126...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +29 more potentially affected by unknown CVE via unic-ucd-hangul (>=0.8.0, <=0.9.0)

unic-ucd-hangul CARGO version =0.8.0, =0.3.0, =0.3.0, =0.0.0, =0.2.4-beta, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.0.0, =0.0.111 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0079...

bootstring (0.1.0), deltachat_message_parser (>=0.3.0, <=0.14.1) +8 more potentially affected by unknown CVE via unic-idna-punycode (>=0.1.1, <=0.9.0)

unic-idna-punycode CARGO version =0.1.1, =0.3.0, =0.3.0, =0.2.4-beta, =0.3.0, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.1.1, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0088...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +320 more potentially affected by unknown CVE via unic-char-property (>=0.6.0, <=0.9.0)

unic-char-property CARGO version =0.6.0, =0.1.2, =0.1.0, =0.3.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0-alpha.4, =0.3.0, =1.0.0, =1.0.5 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0081...

actix-plus-auth (0.0.1), actix-plus-utils (0.1.0) +45 more potentially affected by unknown CVE via unic-ucd-category (>=0.5.0, <=0.9.0)

unic-ucd-category CARGO version =0.5.0, =0.3.0, =0.3.0, =0.2.0, =0.0.0, =0.0.102, =0.1.0, =0.0.7, =1.0.0, =0.0.1, =1.0.0 - if 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0094...

alemat (>=0.3.0, <=0.8.0), box-bin (0.3.1) +20 more potentially affected by unknown CVE via unic-ucd-case (>=0.6.0, <=0.9.0)

unic-ucd-case CARGO version =0.6.0, =0.3.0, =0.3.0, =0.0.0, =0.0.102, =0.0.7, =0.0.1, =1.0.0, =1.11.3, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0092...

GHSA-GR6V-3PMP-996P Cargo Mediawiki Extension vulnerable to Cross-site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension befor 3.8.3...

Cargo Mediawiki Extension vulnerable to Cross-site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS. This issue affects Mediawiki - Cargo Extension befor 3.8.3...

EUVD-2025-34960

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...

CVE-2025-62671

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...

CVE-2025-62671

CVE-2025-62671 is a Stored XSS vulnerability in the Mediawiki Cargo Extension (master). The issue arises from improper input neutralization during web page generation, allowing malicious scripts to be stored and executed when affected content is viewed. Affected component: mediawiki/cargo. Remedi...

CVE-2025-62671 Stored XSS through wikitext in Cargo

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...

CVE-2025-62671 Stored XSS through wikitext in Cargo

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This issue affects Mediawiki - Cargo Extension: master...

EUVD-2025-34944

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...

Mediawiki - Cargo Extension 安全漏洞

Mediawiki - Cargo Extension is an open source Mediawiki plugin for querying and storing data. A security vulnerability exists in the master version of Mediawiki - Cargo Extension, which stems from improper input neutralization during page generation and could lead to a stored cross-site scripting...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the start and end request parameters in CargoExport.php. An attacker can execute arbitrary SQL commands by submitting crafted input to the affected endpoint. Remediation Upgrade mediawiki/cargo to version 3.8.4 or...

CVE-2025-62655

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...

CVE-2025-62655 SQL injection in Cargo via Special:CargoExport

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...

CVE-2025-62655 SQL injection in Cargo via Special:CargoExport

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44...