BeerHolderBot (>=0.3.1 <=0.3.8), a2kit (>=0.1.0 <=2.0.6) +681 more potentially affected by unknown CVE via json (>=0.10.3 <=0.9.1)

json CARGO version =0.10.3, =0.3.1, =0.1.0, =0.0.2, =0.0.1, =0.1.0, =7.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.9.0, =0.9.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0081...

Multiple soundness issues in `owning_ref`

OwningRef::mapwithowner is unsound and may result in a use-after-free. - OwningRef::map is unsound and may result in a use-after-free. - OwningRefMut::asowner and OwningRefMut::asownermut are unsound and may result in a use-after-free. - The crate violates Rust's aliasing rules, which may cause...

crate has been renamed to `ftdi-embedded-hal`

This crate has been renamed from ftd2xx-embedded-hal to ftdi-embedded-hal. The new repository location is:...

odbc-avro (>=0.1.0 <=0.2.1), odbc-iter (>=0.1.0 <=0.2.7) +6 more potentially affected by unknown CVE via odbc (>=0.10.2 <=0.9.17)

odbc CARGO version =0.10.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.1.1 - unidbpgsql =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0039...

`markdown` (1.0.0 and higher) is maintained

A new markdown crate has been brought over by a new maintainer replacing the old crate. The crate GitHub repository is now wooorm/markdown-rs This advisory has been withdraw since version 1.0.0 was released on 2025-04-23. markdown 0.3.0 and lower was unmaintained The old markdown crate was no...

Use After Free in lru

Lru crate has two functions for getting an iterator. Both iterators give references to key and value. Calling specific functions, like pop, will remove and free the value, and but it's still possible to access the reference of value which is already dropped causing use after free...

GHSA-24G6-5RX7-58WJ Missing Initialization of Resource in pnet

An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault upon attempted dereference of an uninitialized descriptor because of an erroneous IcmpTransportChannelIterator compiler optimization...

kari (=0.1.0), soos-sample-project (=1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (=2.0.0)

accreader CARGO version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari =0.1.0 - soos-sample-project =1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:GHSA-799F-R78P-GQ9C...

hina (>=0.0.1 <=0.1.3) potentially affected by CVE-2020-36511 via bite (=0.0.5)

bite CARGO version =0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on bite and may be impacted: - hina =0.0.1, =0.1.3 Source cves: CVE-2020-36511 Source advisory: OSV:GHSA-V2CH-FC8F-QM33...

GHSA-V2CH-FC8F-QM33 Use of Uninitialized Resource in bite.

An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...

Use of Uninitialized Resource in bite.

An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::readframedmax may read from uninitialized memory locations...

Window may read from uninitialized memory locations in rdiff

An issue was discovered in the rdiff crate through version 0.1.2 for Rust. Window may read from uninitialized memory locations...

GHSA-2RXC-8F9W-FJQ8 Window may read from uninitialized memory locations in rdiff

An issue was discovered in the rdiff crate through version 0.1.2 for Rust. Window may read from uninitialized memory locations...

LemoGUI (=0.0.1-nightly), a2d (>=0.1.0 <=0.1.11) +277 more potentially affected by CVE-2021-45688 via ash (>=0.24.4 <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.1.0, =0.5.4, =0.2.0, =0.1.0, =0.3.0 - amethyst-navigation =0.1.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-64WV-8VWP-XGW2...

Use of Uninitialized Resource in ash.

An issue was discovered in the ash crate before 0.33.1 for Rust. util::readspv may read from uninitialized memory locations...

GHSA-64WV-8VWP-XGW2 Use of Uninitialized Resource in ash.

An issue was discovered in the ash crate before 0.33.1 for Rust. util::readspv may read from uninitialized memory locations...

Incorrect reliance on Trait memory layout in mopa

The mopa crate redefines the deprecated TraitObject struct from core::raw. This is done to then transmute a reference to a trait object &dyn Trait for any trait Trait into this struct and retrieve the data field for the purpose of downcasting. This is used to implement downcastrefunchecked, in...

GHSA-8GJM-H3XJ-MP6W RPC call failure in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. A getblocktemplate RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction...

RPC call failure in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. A getblocktemplate RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction...

Incorrect hash in sha2

The v0.9.7 release of the sha2 crate introduced a new AVX2-accelerated backend which was automatically enabled for all x86/x8664 CPUs where AVX2 support was autodetected at runtime. This backend was buggy and would miscompute results for long messages i.e. messages spanning multiple SHA blocks. T...