1267 matches found
CVE-2024-35197 vulnerabilities
Vulnerabilities for packages: cargo-audit...
GHSA-CX7H-H87R-JPGR vulnerabilities
Vulnerabilities for packages: cargo-audit...
CVE-2024-35186 vulnerabilities
Vulnerabilities for packages: cargo-audit...
GHSA-98P4-XJMM-8MFH vulnerabilities
Vulnerabilities for packages: cargo-audit...
CVE-2024-32884 vulnerabilities
Vulnerabilities for packages: cargo-audit...
GHSA-49JC-R788-3FC9 vulnerabilities
Vulnerabilities for packages: cargo-audit...
GHSA-7W47-3WG8-547C vulnerabilities
Vulnerabilities for packages: cargo-audit...
MAL-2025-2568 Malicious code in cargo-cyclonedx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310e72b56f73cd7a869e3c76fc0da1be55d3e187c73cca623ce18ea3107f992c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cargo-cyclonedx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310e72b56f73cd7a869e3c76fc0da1be55d3e187c73cca623ce18ea3107f992c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
akd (>=0.7.3, <=0.7.7), akd_client (>=0.7.6, <=0.7.7) +42 more potentially affected by CVE-2025-53605 via protobuf (>=3.0.0, <=3.7.1)
protobuf CARGO version =3.0.0, =0.7.3, =0.7.6, =0.2.5, =0.5.12, =0.18.1, =0.7.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.8.0, =0.9.3 and more Source cves: CVE-2025-53605 Source advisory: OSV:GHSA-2GH3-RMM4-6RQ5...
OESA-2025-1237 rust security update
Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fixes: Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not...
OESA-2025-1236 rust security update
Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fixes: Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not...
a2 (>=0.2.0, <=0.8.1), aati (>=0.10.2, <=0.11.3) +5509 more potentially affected by CVE-2025-4432 via ring (>=0.13.5, <=0.17.9)
ring CARGO version =0.13.5, =0.2.0, =0.10.2, =0.1.0, =0.2.0-beta.4, =0.21.0-alpha.1, =0.1.1, =0.11.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.11.3, =0.1.27, =0.2.1 and more Source cves: CVE-2025-4432 Source advisory: OSV:RUSTSEC-2025-0009...
Linux Distros Unpatched Vulnerability : CVE-2023-38497
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not...
Linux Distros Unpatched Vulnerability : CVE-2022-36113
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the /.cargo folder on disk, makin...
Linux Distros Unpatched Vulnerability : CVE-2022-46176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and...
Linux Distros Unpatched Vulnerability : CVE-2022-36114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. ...
Linux Distros Unpatched Vulnerability : CVE-2023-40030
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when...
actix-elastic (>=1.0.0, <=1.0.7), actix-nats (>=0.4.0, <=0.4.1) +221 more potentially affected by unknown CVE via backoff (>=0.1.6, <=0.4.0)
backoff CARGO version =0.1.6, =1.0.0, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.5.1, =0.2.0-beta.0, =0.6.0, =0.2.0, =0.5.0 - adventure-rusoto-ecs 0.4.0 - adventure-rusoto-sns 0.4.0 - adventure-rusoto-sqs 0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0012...
