auto-wasi (=0.1.0), candid-extractor (>=0.1.0 <=0.1.2) +99 more potentially affected by CVE-2022-39393 via wasmtime (>=0.10.0 <=12.0.2)

wasmtime CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.0.0, =0.5.0, =0.0.1-alpha, =0.40.1, =0.45.0, =0.1.0, =0.3.0 - inkpad-executor =0.1.0 and more Source cves: CVE-2022-39393 Source advisory: OSV:RUSTSEC-2022-0075...

auto-wasi (=0.1.0), candid-extractor (>=0.1.0 <=0.1.2) +99 more potentially affected by CVE-2022-39392 via wasmtime (>=0.10.0 <=12.0.2)

wasmtime CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.0.0, =0.5.0, =0.0.1-alpha, =0.40.1, =0.45.0, =0.1.0, =0.3.0 - inkpad-executor =0.1.0 and more Source cves: CVE-2022-39392 Source advisory: OSV:RUSTSEC-2022-0076...

auto-wasi (=0.1.0), candid-extractor (>=0.1.0 <=0.1.2) +99 more potentially affected by CVE-2022-39392 via wasmtime (>=0.10.0 <=12.0.2)

wasmtime CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.1, =0.5.3-0, =0.4.0, =0.4.0, =0.0.0, =0.5.0, =0.0.1-alpha, =0.40.1, =0.45.0, =0.1.0, =0.3.0 - inkpad-executor =0.1.0 and more Source cves: CVE-2022-39392 Source advisory: OSV:RUSTSEC-2022-0102...

eth-utils (>=0.1.1 <=0.2.0), evm-network (>=0.11.0 <=0.11.0-beta.3) +31 more potentially affected by CVE-2022-39354 via evm (>=0.11.1 <=0.33.1)

evm CARGO version =0.11.1, =0.1.1, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =1.0.0, =1.0.0, =2.1.0 - fp-storage =1.0.0 and more Source cves: CVE-2022-39354 Source advisory: OSV:RUSTSEC-2022-0083...

alerter (>=0.3.0 <=0.3.1), maruc (=0.1.0) +9 more potentially affected by CVE-2022-39252 via matrix-sdk-crypto (>=0.1.0 <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2022-39252 Source advisory: OSV:GHSA-VP68-2WRM-69QM...

alerter (>=0.3.0 <=0.3.1), maruc (=0.1.0) +9 more potentially affected by CVE-2022-39252 via matrix-sdk-crypto (>=0.1.0 <=0.5.0)

matrix-sdk-crypto CARGO version =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.10-alpha, =0.13.0, =0.13.1 Source cves: CVE-2022-39252 Source advisory: OSV:RUSTSEC-2022-0085...

hotg-rune-runtime (>=0.11.0 <=0.11.3), hotg-rune-wasm3-runtime (>=0.6.0 <=0.10.0) +7 more potentially affected by CVE-2022-39974 via wasm3 (>=0.1.3 <=0.3.1)

wasm3 CARGO version =0.1.3, =0.11.0, =0.6.0, =0.7.0, =0.4.0, =0.2.0, =0.0.1, =0.16.0, =0.15.0, =0.19.0 Source cves: CVE-2022-39974 Source advisory: OSV:GHSA-CRF8-H2WQ-2H9X...

accrete (>=0.1.7 <=0.2.0), adana-script-wasm (>=0.16.5-rc.1 <=0.17.10) +322 more potentially affected by unknown CVE via wee_alloc (>=0.1.0 <=0.4.5)

weealloc CARGO version =0.1.0, =0.1.7, =0.16.5-rc.1, =0.1.0, =0.4.0, =0.1.1, =0.1.2, =1.4.0, =0.1.0, =0.2.8 - biscuit-wasm =0.1.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-RC23-XXGQ-X27G...

accepted (>=0.2.0 <=0.3.2), aigc_api (=5.1.2) +507 more potentially affected by unknown CVE via typemap (=0.3.3)

typemap CARGO version =0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on typemap and may be impacted: - accepted =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VFV3-9W6V-23JP...

armory_cli (>=0.3.3 <=0.3.28), armory_lib (>=0.1.0 <=0.3.28) +133 more potentially affected by CVE-2022-36114 via cargo (>=0.10.0 <=0.64.0)

cargo CARGO version =0.10.0, =0.3.3, =0.1.0, =0.10.0, =0.10.0, =0.1.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.6.0, =0.1.0, =0.1.1, =1.1.0 and more Source cves: CVE-2022-36114 Source advisory: OSV:GHSA-2HVR-H6GW-QRXP...

ahecha (>=0.0.5 <=0.0.9), ahecha_html (>=0.0.2 <=0.0.8) +80 more potentially affected by CVE-2022-3212 via axum-core (=0.1.2)

axum-core CARGO version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on axum-core and may be impacted: - ahecha =0.0.5, =0.0.2, =0.0.2, =0.1.0, =3.0.14, =0.14.0, =0.33.0, =0.4.0, =0.1.0, =0.1.1 - axum-client-ip =0.1.0 - axum-core =0.2.0 and more...

UBUNTU-CVE-2022-36114

Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. An attacker could upload to an alternate registry a specially crafted package that extracts way more data than its size also known as a...

ahecha (>=0.0.5 <=0.0.9), ahecha_html (>=0.0.2 <=0.0.8) +80 more potentially affected by CVE-2022-3212 via axum-core (=0.1.2)

axum-core CARGO version =0.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on axum-core and may be impacted: - ahecha =0.0.5, =0.0.2, =0.0.2, =0.1.0, =3.0.14, =0.14.0, =0.33.0, =0.4.0, =0.1.0, =0.1.1 - axum-client-ip =0.1.0 - axum-core =0.2.0 and more...

alass-util (=0.3.0), assembly-data (>=0.2.0 <=0.3.0-beta.0) +57 more potentially affected by unknown CVE via mapr (=0.8.0)

mapr CARGO version =0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on mapr and may be impacted: - alass-util =0.3.0 - assembly-data =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.101.0, =0.37.0, =0.101.0, =0.4.0, =0.37.0, =0.40.0, =0.40.0,...

abci-storage (=0.0.3), arcon_backend (>=0.1.0 <=0.1.1) +144 more potentially affected by unknown CVE via rocksdb (>=0.10.1 <=0.18.0)

rocksdb CARGO version =0.10.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XPP3-XRFF-W6RH...

Malicious code in rustdecimal (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e33f42f05c60c6d9f9297bae15a43d6c445e2ad0fd67fa4ef144e5cc79d09c7 The Rust Security Response WG and the crates.io team were notified1 on 2022-05-02 of the existence of the malicious crate rustdecimal, which contained...

a2 (>=0.3.6 <=0.5.0-alpha.1), abci-storage (=0.0.3) +1566 more potentially affected by unknown CVE via owning_ref (>=0.1.4 <=0.4.1)

owningref CARGO version =0.1.4, =0.3.6, =0.1.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9QXH-258V-666C...

Interledger is Unmaintained

Interledger family of crates is not being actively maintained anymore. The owner of the published crate does not appear to be responsive. There is an outstanding concern around username comparison. This concern may or may not be resolved by bumping up the dependencies of the project...

RUSTSEC-2022-0050 Interledger is Unmaintained

Interledger family of crates is not being actively maintained anymore. The owner of the published crate does not appear to be responsive. There is an outstanding concern around username comparison. This concern may or may not be resolved by bumping up the dependencies of the project...

PT-2022-37421 · Unknown · Interledger

Name of the Vulnerable Software and Affected Versions: Interledger affected versions not specified Description: The Interledger family of crates is no longer actively maintained, and the owner of the published crate is unresponsive. There is a concern regarding username comparison, which may or m...