alerter (>=0.3.0 <=0.3.1), libmatrix-client (=0.0.1) +10 more potentially affected by unknown CVE via olm-sys (>=0.1.5 <=1.3.2)

olm-sys CARGO version =0.1.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:GHSA-P2Q9-36VW-C468...

alerter (>=0.3.0 <=0.3.1), libmatrix-client (=0.0.1) +10 more potentially affected by CVE-2024-45191 +2 more via olm-sys (>=0.1.5 <=1.3.2)

olm-sys CARGO version =0.1.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.1.0, =0.3.0 Source cves: CVE-2024-45191, CVE-2024-45192, CVE-2024-45193 Source advisory: OSV:RUSTSEC-2024-0368...

AeP (>=0.1.0 <=0.1.3), AskAI (=0.1.0) +11418 more potentially affected by unknown CVE via proc-macro-error (>=0.2.6 <=1.0.4)

proc-macro-error CARGO version =0.2.6, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.13.2, =0.13.4 - Voidrenderer =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0370...

AitSar (=0.1.1), Boa (>=0.11.0 <=0.13.1) +9707 more potentially affected by unknown CVE via instant (>=0.1.13 <=0.1.9)

instant CARGO version =0.1.13, =0.11.0, =0.1.0-beta.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0384...

cauuu (>=0.1.0 <=0.1.1), cosmwasm-simulate (>=0.13.2 <=0.13.6) +10 more potentially affected by unknown CVE via cosmwasm-vm (>=0.10.1 <=0.9.4)

cosmwasm-vm CARGO version =0.10.1, =0.1.0, =0.13.2, =0.4.0, =0.4.0, =0.2.0, =0.4.0, =0.2.0, =0.2.1, =0.1.12, =0.1.13 - terra-math =0.0.0 - terraswap =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-75QH-GG76-P2W4...

IMAPServer (=0.2.0), IMAPServer-cli (=0.1.0) +369 more potentially affected by unknown CVE via diesel (>=0.10.1 <=2.2.12)

diesel CARGO version =0.10.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.4, =0.1.11, =0.1.0, =0.5.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WQ9X-QWCQ-MMGF...

databend-common-ast (>=0.0.0 <=0.0.2), foyer-common (>=0.8.0 <=0.8.1) +10 more potentially affected by unknown CVE via minitrace (>=0.3.1 <=0.6.7)

minitrace CARGO version =0.3.1, =0.0.0, =0.8.0, =0.8.0, =0.1.7, =0.3.0, =0.6.4, =0.3.0, =0.5.0, =0.1.0, =0.1.1 - risinglight =0.1.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0390...

cauuu (>=0.1.0 <=0.1.1), cosmwasm-check (>=1.1.0 <=1.3.4) +16 more potentially affected by unknown CVE via cosmwasm-vm (>=0.10.1 <=1.3.4)

cosmwasm-vm CARGO version =0.10.1, =0.1.0, =1.1.0, =0.13.2, =0.4.0, =0.4.0, =0.2.0, =0.4.0, =0.2.0, =0.2.1, =0.1.12, =0.1.13 - terra-math =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RG2Q-2JH9-447Q...

cauuu (>=0.1.0 <=0.1.1), cosmwasm-check (>=1.1.0 <=1.3.4) +16 more potentially affected by unknown CVE via cosmwasm-vm (>=0.10.1 <=1.3.4)

cosmwasm-vm CARGO version =0.10.1, =0.1.0, =1.1.0, =0.13.2, =0.4.0, =0.4.0, =0.2.0, =0.4.0, =0.2.0, =0.2.1, =0.1.12, =0.1.13 - terra-math =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0361...

bitcoin-harness (=0.1.0), bitcoin_rpc_client (>=0.5.0 <=0.6.1) +80 more potentially affected by unknown CVE via openssl (>=0.10.22 <=0.10.57)

openssl CARGO version =0.10.22, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.1.24, =0.37.0, =0.4.0, =0.37.0, =0.37.0, =0.38.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0357...

alerter (>=0.3.0 <=0.3.1), maruc (=0.1.0) +9 more potentially affected by CVE-2024-40648 via matrix-sdk-crypto (>=0.1.0 <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2024-40648 Source advisory: OSV:GHSA-4QG4-CVH2-CRGG...

matrix-qrcode (=0.3.0), matrix-sdk-base (>=0.5.0 <=0.5.1) +5 more potentially affected by CVE-2024-40640 via vodozemac (>=0.2.0 <=0.3.0)

vodozemac CARGO version =0.2.0, =0.5.0, =0.3.0, =0.4.0 - matrix-sdk-sled =0.1.0 - matrix-sdk-sql =0.1.0-beta.2 Source cves: CVE-2024-40640 Source advisory: OSV:RUSTSEC-2024-0354...

ayaka-model (=0.2.0), ayaka-runtime (=0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0 <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob =1.0.0-beta1 - icusegmenter =1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-74R5-G7VC-J2V2...

ayaka-model (=0.2.0), ayaka-runtime (=0.2.0) +16 more potentially affected by unknown CVE via zerovec-derive (>=0.6.0 <=0.8.0)

zerovec-derive CARGO version =0.6.0, =0.6.0, =1.0.0-beta1 - icuproviderblob =1.0.0-beta1 - icusegmenter =1.0.0-alpha1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0346...

csaf-walker (=0.1.0), did-webkey (=0.1.1) +17 more potentially affected by CVE-2024-58261 via sequoia-openpgp (>=1.14.0 <=1.17.0)

sequoia-openpgp CARGO version =1.14.0, =0.3.0, =0.25.0, =0.1.0, =0.30.0, =0.1.0, =0.1.0, =0.1.0, =0.26.0, =0.28.0 - sequoia-openpgp-mt =0.1.0 and more Source cves: CVE-2024-58261 Source advisory: OSV:GHSA-9344-P847-QM5C...

atuin (>=0.3.0 <=11.0.0), atuin-client (>=0.6.2 <=11.0.0) +27 more potentially affected by unknown CVE via chrono-english (=0.1.8)

chrono-english CARGO version =0.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on chrono-english and may be impacted: - atuin =0.3.0, =0.6.2, =0.6.2, =0.1.0, =1.9.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.4.2, =0.4.0, =0.7.0, =0.0.4, =1.0.0 and more Sour...

actix-casbin (>=0.1.0 <=0.3.3), actix-casbin-auth (>=0.1.0 <=0.3.2) +29 more potentially affected by CVE-2024-36760 via rhai (>=0.11.1 <=1.16.3)

rhai CARGO version =0.11.1, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.5.1, =0.1.0, =0.0.1-beta1, =3.1.0, =0.1.0, =0.1.1 - infinite-db-frp =0.1.0 and more Source cves: CVE-2024-36760 Source advisory: OSV:GHSA-67FV-9R7G-432H...

acme-compilers (>=0.2.2 <=0.2.4), acvm (>=0.23.0 <=0.26.1) +159 more potentially affected by CVE-2024-38358 via wasmer (>=0.17.1 <=4.3.0-beta.1)

wasmer CARGO version =0.17.1, =0.2.2, =0.23.0, =0.23.0, =0.1.0, =0.4.0-alpha.0, =0.23.0, =0.1.0, =0.1.1, =1.1.0, =0.13.2, =0.13.6 and more Source cves: CVE-2024-38358 Source advisory: OSV:GHSA-55F3-3QVG-8PV5...

SUSE CVE-2023-40030

Cargo downloads a Rust project's dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when including them in the report generated by cargo build --timings. A malicious package included as a dependency may inject nearly arbitrar...

sessions (>=0.2.0 <=0.6.0), viz (>=0.1.0-alpha.3 <=0.1.0-alpha.10) +1 more potentially affected by CVE-2024-36400 via nano-id (>=0.1.1 <=0.3.3)

nano-id CARGO version =0.1.1, =0.2.0, =0.1.0-alpha.3, =0.1.0, =0.1.2 Source cves: CVE-2024-36400 Source advisory: OSV:RUSTSEC-2024-0343...