3514 matches found
GHSA-66FW-43H8-F8P3 XMP Toolkit's `XmpFile::close` can trigger undefined behavior
Affected versions of the crate failed to catch C++ exceptions raised within the XmpFile::close function. If such an exception occurred, it would trigger undefined behavior, typically a process abort. This is best demonstrated in issue 230, where a race condition causes the close call to fail due ...
CVE-2024-41178
Apache Arrow Rust Object Store (object_store crate)
CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...
CVE-2024-40648 `UserIdentity::is_verified` not checking verification status of own user identity while performing the check in matrix-rust-sdk
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The UserIdentity::isverified method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's own identity while performing the check and may as a result retur...
RUSTSEC-2024-0442 Dump Undefined Memory by `JitDumpFile`
The unsound function dumpcodeloadrecord uses fromrawparts to directly convert the pointer addr and len into a slice without any validation and that memory block would be dumped. Thus, the 'safe' function dumpcodeloadrecord is actually 'unsafe' since it requires the caller to guarantee that the ad...
Dump Undefined Memory by `JitDumpFile`
The unsound function dumpcodeloadrecord uses fromrawparts to directly convert the pointer addr and len into a slice without any validation and that memory block would be dumped. Thus, the 'safe' function dumpcodeloadrecord is actually 'unsafe' since it requires the caller to guarantee that the ad...
actix-web-opentelemetry (>=0.13.0 <=0.15.0), apikit (>=0.1.0 <=0.2.0) +114 more potentially affected by unknown CVE via opentelemetry_api (>=0.18.0 <=0.20.0)
opentelemetryapi CARGO version =0.18.0, =0.13.0, =0.1.0, =0.0.1, =0.8.1, =4.0.15, =0.1.0, =0.1.0, =0.1.1, =0.4.0-rc.1, =0.5.0, =0.1.0, =6.6.4, =0.0.1, =0.0.1-alpha.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0387...
RUSTSEC-2024-0389 `openslide` is unmaintained
The openslide crate is no longer maintained. Last release was on 2018-11-20. Possible alternatives Consider using an alternative, for instance: - openslide-rs - pamly...
RUSTSEC-2024-0387 `opentelemetry_api` has been merged into the `opentelemetry` crate
Last release was on 2023-07-30. opentelemetryapi has been moved into the opentelemetry crate. Please use the opentelemetry crate going forward...
`openslide` is unmaintained
The openslide crate is no longer maintained. Last release was on 2018-11-20. Possible alternatives Consider using an alternative, for instance: - openslide-rs - pamly...
`opentelemetry_api` has been merged into the `opentelemetry` crate
Last release was on 2023-07-30. opentelemetryapi has been moved into the opentelemetry crate. Please use the opentelemetry crate going forward...
PT-2024-40933 · Unknown · Opentelemetry Api
Name of the Vulnerable Software and Affected Versions: opentelemetry api affected versions not specified Description: The opentelemetry api has been moved into the opentelemetry crate. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2024-40935 · Unknown · Openslides
Name of the Vulnerable Software and Affected Versions: openslide affected versions not specified Description: The openslide crate is no longer maintained, with its last release on 2018-11-20. Recommendations: At the moment, there is no information about a newer version that contains a fix for thi...
CBL Mariner 2.0 Security Update: cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt (CVE-2023-48795)
The version of cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-48795 advisory. - The SSH transport protocol with certain...
Regular expression denial of service in Rust's regex crate
...
AitSar (=0.1.1), Hela (>=0.1.0 <=0.1.4) +3612 more potentially affected by unknown CVE via derivative (>=1.0.4 <=2.2.0)
derivative CARGO version =1.0.4, =0.1.0, =0.1.0, =4.3.0, =0.1.0, =0.2.3, =0.1.0, =0.13.0, =0.16.0, =0.1.0, =0.2.0-beta.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0388...
RUSTSEC-2024-0388 `derivative` is unmaintained; consider using an alternative
The derivative crate is no longer maintained. Consider using any alternative, for instance: - derivemore - derive-where - educe...
`derivative` is unmaintained; consider using an alternative
The derivative crate is no longer maintained. Consider using any alternative, for instance: - derivemore - derive-where - educe...