The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.

...

git-url-parse crate vulnerable to Regular Expression Denial of Service

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service ReDos via a crafted URL to normalizeurl in lib.rs, a similar issue to CVE-2023-32758 Python...

CVE-2023-33290

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service ReDos via a crafted URL to normalizeurl in lib.rs, a similar issue to CVE-2023-32758 Python...

CVE-2023-33290

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service ReDos via a crafted URL to normalizeurl in lib.rs, a similar issue to CVE-2023-32758 Python...

SUSE CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

xml-rs vulnerable to denial of service via invalid token in XML document

The xml-rs crate = 0.8.9 and 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document...

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid...

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

UBUNTU-CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

`users` crate is unmaintained

The users crate hasn't seen any action since 2020-10-08. The developer seems MIA since. Recommended alternatives - uzers - sysinfo MIA: https://github.com/ogham/rust-users/issues/54 uzers: https://crates.io/crates/uzers sysinfo: https://crates.io/crates/sysinfo...

PT-2023-36091 · Users · Users

Name of the Vulnerable Software and Affected Versions: users affected versions not specified Description: The issue concerns the users crate, which has not been updated since 2020-10-08, and its developer appears to be inactive. Recommendations: At the moment, there is no information about a newe...

crate has been renamed to `crypto_secretbox`

This crate has been forked/renamed from xsalsa20poly1305 to cryptosecretbox. The new repository location is at:...

PT-2025-31039 · Unknown +1 · Sequoia-Openpgp +1

Name of the Vulnerable Software and Affected Versions: sequoia-openpgp crate versions prior to 1.16.0 Description: The sequoia-openpgp crate contains a flaw that allows out-of-bounds array access, potentially leading to a panic. Recommendations: Update to sequoia-openpgp crate version 1.16.0 or...

PT-2025-31040 · Unknown +1 · Buffered-Reader +1

Name of the Vulnerable Software and Affected Versions: buffered-reader crate versions prior to 1.1.5 buffered-reader crate versions prior to 1.2.0 Description: The buffered-reader crate for Rust contains a flaw that allows out-of-bounds array access and a panic. Recommendations: Update the...

acmer (>=0.0.1 <=0.0.16), avalanche-config-installer (>=0.2.36 <=0.2.43) +411 more potentially affected by CVE-2023-30610 via aws-sigv4 (>=0.4.2 <=0.56.1)

aws-sigv4 CARGO version =0.4.2, =0.0.1, =0.2.36, =0.0.18, =0.0.42, =0.0.9, =0.4.0, =0.0.24, =0.21.0, =0.4.0, =0.55.2, =0.4.0, =0.4.0, =0.4.0, =0.4.0, =0.34.0 and more Source cves: CVE-2023-30610 Source advisory: OSV:RUSTSEC-2023-0125...

multipart is Unmaintained

The multipart crate is unmaintained. The author has archived the github repository. Alternatives: - multer - multiparty...

PT-2023-36094 · Multipart · Multipart

Name of the Vulnerable Software and Affected Versions: multipart crate affected versions not specified Description: The multipart crate is unmaintained, and its GitHub repository has been archived by the author. Recommendations: At the moment, there is no information about a newer version that...

Versionize::deserialize implementation for FamStructWrapper<T> is lacking bound checks, potentially leading to out of bounds memory accesses

Impact An issue was discovered in the Versionize::deserialize implementation provided by the versionize crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. Patches The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserti...

GHSA-8VXC-R5WP-VGVC Versionize::deserialize implementation for FamStructWrapper<T> is lacking bound checks, potentially leading to out of bounds memory accesses

Impact An issue was discovered in the Versionize::deserialize implementation provided by the versionize crate for vmmsysutil::fam::FamStructWrapper, which can lead to out of bounds memory accesses. Patches The impact started with version 0.1.1. The issue was corrected in version 0.1.10 by inserti...