cacheline-ef (>=1.0.0 <=1.1.0), dsi-bitstream (=0.4.2) +7 more potentially affected by unknown CVE via maligned (=0.2.1)

maligned CARGO version =0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on maligned and may be impacted: - cacheline-ef =1.0.0, =0.4.0, =0.6.0, =0.1.6, =0.1.0, =0.4.0, =0.4.2 - vframe =0.3.2 Source cves: unknown CVE Source advisory:...

abrute (>=0.1.7 <=0.1.9), alass-cli (>=1.0.0 <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.6.0 <=0.8.7)

ascii CARGO version =0.6.0, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MRRW-GRHQ-86GF...

abrute (>=0.1.7 <=0.1.9), alass-cli (>=1.0.0 <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.7.1 <=0.8.7)

ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0015...

BuildEAR (=3.1.0), IMAPServer (=0.2.0) +2463 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0 <=0.7.0)

removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.1, =0.1.0, =0.2.0, =2.1.0, =2.3.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MC8H-8Q98-G5HR...

BuildEAR (=3.1.0), IMAPServer (=0.2.0) +2463 more potentially affected by unknown CVE via remove_dir_all (>=0.3.0 <=0.7.0)

removedirall CARGO version =0.3.0, =0.22.2, =0.1.2, =0.1.1, =0.1.0, =0.2.0, =2.1.0, =2.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0018...

BeerHolderBot (>=0.1.0 <=0.3.6), IMAPServer (>=0.1.0 <=0.2.0) +4841 more potentially affected by unknown CVE via tokio (>=0.2.10 <=1.17.0)

tokio CARGO version =0.2.10, =0.1.0, =0.1.0, =1.0.0, =0.0.2, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4Q83-7CQ4-P6WG...

acme-dns-rust (>=1.0.0 <=1.0.6), acme2-slim (=0.2.0) +161 more potentially affected by unknown CVE via warp (>=0.1.23 <=0.3.1)

warp CARGO version =0.1.23, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =1.0.0, =0.14.0, =0.4.0, =0.1.0, =0.1.0, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-8V4J-7JGF-5RG9...

acari-lib (>=0.1.11 <=0.1.12), acme-rs (>=0.1.0 <=0.2.0) +350 more potentially affected by unknown CVE via buf_redux (>=0.1.3 <=0.8.4)

bufredux CARGO version =0.1.3, =0.1.11, =0.1.0, =0.9.2, =0.5.1, =0.2.0, =0.1.0, =0.0.1, =0.1.5, =0.0.5, =0.0.1, =0.1.0, =1.0.0, =0.26.1, =0.26.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0028...

a-gpt (>=0.1.0 <=0.4.0), abacuz (=0.1.1) +889 more potentially affected by CVE-2023-22742 via git2 (>=0.10.0 <=0.16.0)

git2 CARGO version =0.10.0, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.3.3 - amisgitpm =0.0.1 - amp =0.6.2 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...

afterglow (>=0.1.0 <=0.3.0), aiid_js (=0.0.1) +47 more potentially affected by unknown CVE via bumpalo (=2.6.0)

bumpalo CARGO version =2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on bumpalo and may be impacted: - afterglow =0.1.0, =0.5.4, =0.1.0, =3.0.0, =4.0.2, =0.114.0, =0.114.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.6.1 and more Source cves: unkno...

abacuz (=0.1.1), almel (>=1.2.0 <=1.3.0) +531 more potentially affected by CVE-2023-22742 via libgit2-sys (>=0.10.0 <=0.13.2+1.4.2)

libgit2-sys CARGO version =0.10.0, =1.2.0, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =0.1.3, =0.1.0, =0.2.0 and more Source cves: CVE-2023-22742 Source advisory: OSV:RUSTSEC-2023-0003...

GuiNistRs (=0.1.0), ablavema (=0.4.2) +329 more potentially affected by CVE-2022-45299 via webbrowser (>=0.1.3 <=0.8.15)

webbrowser CARGO version =0.1.3, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.1, =0.1.0, =0.1.0, =1.0.9, =0.1.0, =0.1.2 - antigravity =0.0.5 and more Source cves: CVE-2022-45299 Source advisory: OSV:GHSA-M589-MV4Q-P7RJ...

AZL-12969 CVE-2022-46176 affecting package rust for versions less than 1.68.2-1

Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. An attacker could exploit this to perform man-in-the-middle MITM attacks. This vulnerability has been assigned...

a2s (>=0.1.0 <=0.5.1), abxml (>=0.2.1 <=0.6.2) +240 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3 <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.2.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:GHSA-96JV-R488-C2RJ...

a2s (>=0.1.0 <=0.5.1), abxml (>=0.2.1 <=0.6.2) +240 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3 <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.2.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =1.0.0 and more Source cves: CVE-2023-22895 Source advisory: OSV:RUSTSEC-2023-0004...

can2040 (>=0.1.2 <=0.1.5), card10-alloc (>=0.1.0 <=0.1.1) +13 more potentially affected by unknown CVE via alloc-cortex-m (>=0.2.2 <=0.4.4)

alloc-cortex-m CARGO version =0.2.2, =0.1.2, =0.1.0, =0.1.0, =0.0.4, =0.3.2, =0.1.0, =0.1.0, =0.5.6, =0.1.0, =0.1.1, =0.0.2, =0.0.11 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0073...

abci-storage (=0.0.3), bench-trie (>=0.12.0 <=0.12.2) +295 more potentially affected by unknown CVE via parity-util-mem (>=0.10.2 <=0.9.0)

parity-util-mem CARGO version =0.10.2, =0.12.0, =0.7.0, =0.8.8, =1.0.0, =2.0.0, =0.0.7, =0.1.0, =1.0.0 - edge-signaling =1.0.0 - edge-treasury-reward =1.0.0 - edge-voting =1.0.0 - edgeware-primitives =3.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0080...

bioyino-metric (>=0.1.0 <=0.2.0), capnp-futures (>=0.10.0 <=0.12.0) +12 more potentially affected by CVE-2022-46149 via capnp (>=0.0.1 <=0.12.4)

capnp CARGO version =0.0.1, =0.1.0, =0.10.0, =0.0.1, =0.0.1, =0.2.8, =1.0.0, =0.0.5, =0.3.0, =0.0.9, =0.2.0, =0.3.1 Source cves: CVE-2022-46149 Source advisory: OSV:RUSTSEC-2022-0068...

auto-wasi (=0.1.0), candid-extractor (>=0.1.0 <=0.1.2) +99 more potentially affected by CVE-2022-39393 via wasmtime (>=0.10.0 <=12.0.2)

wasmtime CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.0.0, =0.5.0, =0.0.1-alpha, =0.40.1, =0.45.0, =0.1.0, =0.3.0 - inkpad-executor =0.1.0 and more Source cves: CVE-2022-39393 Source advisory: OSV:GHSA-WH6W-3828-G9QF...

auto-wasi (=0.1.0), candid-extractor (>=0.1.0 <=0.1.2) +99 more potentially affected by CVE-2022-39392 via wasmtime (>=0.10.0 <=12.0.2)

wasmtime CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.0.0, =0.5.0, =0.0.1-alpha, =0.40.1, =0.45.0, =0.1.0, =0.3.0 - inkpad-executor =0.1.0 and more Source cves: CVE-2022-39392 Source advisory: OSV:GHSA-44MR-8VMM-WJHG...