EUVD-2022-52293

Malicious code in bioql PyPI...

EUVD-2024-3075

Malicious code in bioql PyPI...

EUVD-2024-42708

Malicious code in bioql PyPI...

EUVD-2023-26972

Malicious code in bioql PyPI...

EUVD-2022-30735

Malicious code in bioql PyPI...

EUVD-2023-41174

Malicious code in bioql PyPI...

EUVD-2023-24058

Malicious code in bioql PyPI...

EUVD-2024-42710

Malicious code in bioql PyPI...

EUVD-2022-52295

Malicious code in bioql PyPI...

EUVD-2023-33673

Malicious code in bioql PyPI...

wrflib_widget (>=0.0.2, <=0.0.3) potentially affected by unknown CVE via wrflib (>=0.0.2, <=0.0.3)

wrflib CARGO version =0.0.2, =0.0.2, =0.0.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0072...

CVE-2025-11233

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

PT-2025-40308

Name of the Vulnerable Software and Affected Versions risc0-zkvm-platform versions 2.0.2 and below risc0-aggregation versions below 0.9 risc0-zkos-v1compat versions below 2.1.0 risc0-zkvm versions 3.0.0-rc.1 through 3.0.1 Description The software contains a flaw related to memory safety in the sy...

Binwalk

This is an implementation of the Binwalk firmware analysis tool in Rust, written for speed and accuracy. Binwalk can identify and optionally extract files and data embedded inside other files, with a focus on firmware analysis. It supports a wide variety of file and data types and can even help...

pingora (>=0.1.0, <=0.5.0), pingora-cache (>=0.1.0, <=0.5.0) +4 more potentially affected by CVE-2025-8671 via pingora-core (>=0.1.1, <=0.5.0)

pingora-core CARGO version =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0 - revoke-gateway 0.3.0 - static-files-module 0.1.0 Source cves: CVE-2025-8671 Source advisory: OSV:RUSTSEC-2025-0070...

cargo-audit-0.21.2~git0.18e58c2-2.1 on GA media (moderate)

cargo-audit-0.21.2git0.18e58c2-2.1 on GA media Announcement ID: openSUSE-SU-2025:15550-1 Rating: moderate Cross-References: CVE-2024-12224 CVE-2025-4574 CVE-2025-58160 CVSS scores: CVE-2024-12224 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 SUSE : 2.1...

cargo-c-0.10.3~git0.ee7d7ef-4.1 on GA media (moderate)

cargo-c-0.10.3git0.ee7d7ef-4.1 on GA media Announcement ID: openSUSE-SU-2025:15551-1 Rating: moderate Cross-References: CVE-2024-12224 CVE-2025-4574 CVE-2025-58160 CVSS scores: CVE-2024-12224 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2024-12224 SUSE : 2.1...

Medium: rust-cargo-c

Issue Overview: tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape sequences could be...

cargo-packaging-1.3.0+0-2.1 on GA media (moderate)

cargo-packaging-1.3.0+0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15552-1 Rating: moderate Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-58160 SUSE : 2.3...

archivefs (>=1.0.0, <=1.0.1), arcon_compiler (>=0.1.0, <=0.1.1) +83 more potentially affected by unknown CVE via daemonize (>=0.2.3, <=0.5.0)

daemonize CARGO version =0.2.3, =1.0.0, =0.1.0, =0.3.1, =0.2.0, =0.5.0, =3.0.0, =0.1.0, =0.1.3, =0.0.1, =0.4.0, =0.1.0, =0.1.2, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0069...