algorithmia (=3.0.0-beta), approveapi (=0.1.0) +164 more potentially affected by CVE-2020-35863 via hyper (>=0.11.27 <=0.12.19)

hyper CARGO version =0.11.27, =0.1.0, =0.2.0, =1.5.0, =0.4.2, =0.1.0, =0.1.0, =0.37.0, =0.39.2 and more Source cves: CVE-2020-35863 Source advisory: OSV:RUSTSEC-2020-0008...

annatar (>=0.4.3 <=0.5.8), ansi2png-rs (>=0.1.0 <=0.1.1) +95 more potentially affected by unknown CVE via rulinalg (>=0.1.0 <=0.4.2)

rulinalg CARGO version =0.1.0, =0.4.3, =0.1.0, =0.2.9, =14.1.0, =0.1.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =0.3.2, =0.3.3 - dali =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0147...

annatar (>=0.4.3 <=0.5.8), ansi2png-rs (>=0.1.0 <=0.1.1) +82 more potentially affected by CVE-2020-35879 via rulinalg (=0.4.2)

rulinalg CARGO version =0.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on rulinalg and may be impacted: - annatar =0.4.3, =0.1.0, =0.2.9, =14.1.0, =0.1.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =0.3.2, =0.1.0, =0.1.3 - electro =0.9.3 and more Source cves:...

HiddenBytes (=0.1.0), Rust-wasm (=0.1.0) +745 more potentially affected by unknown CVE via lzw (=0.10.0)

lzw CARGO version =0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on lzw and may be impacted: - HiddenBytes =0.1.0 - Rust-wasm =0.1.0 - aart =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.15.3 - amethyst-console =0.1.0 -...

NeteaseCloudMusicRustApi (=0.1.1), RustMusic (=0.1.0) +325 more potentially affected by CVE-2020-35902 via actix-codec (>=0.1.2 <=0.2.0)

actix-codec CARGO version =0.1.2, =0.1.0, =0.8.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.1 - actix-delay =0.1.0 - actix-diesel-actor =0.1.1 and more Source cves: CVE-2020-35902 Source advisory: OSV:RUSTSEC-2020-0049...

NeteaseCloudMusicRustApi (=0.1.1), RustMusic (=0.1.0) +319 more potentially affected by CVE-2020-35898 via actix-utils (>=0.3.5 <=1.0.6)

actix-utils CARGO version =0.3.5, =0.1.0, =0.8.0, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-35898 Source advisory: OSV:RUSTSEC-2020-0045...

maidsafe_client (>=0.1.0 <=0.1.2), maidsafe_types (>=0.0.9 <=0.2.3) +6 more potentially affected by unknown CVE via crust (>=0.0.3 <=0.2.12)

crust CARGO version =0.0.3, =0.1.0, =0.0.9, =0.0.3, =0.0.6, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.1.6 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0032...

DesignerHelper-rs (>=0.1.0 <=0.1.2), GetPDB (>=0.1.0 <=1.0.1) +6474 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0 <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.4.0 - abscissacore =0.4.0 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:RUSTSEC-2019-0036...

devp2p (>=0.4.0 <=0.4.1), dpt (>=0.3.0 <=0.3.1) +10 more potentially affected by CVE-2019-25003 via libsecp256k1 (=0.1.3)

libsecp256k1 CARGO version =0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on libsecp256k1 and may be impacted: - devp2p =0.4.0, =0.3.0, =0.3.4, =0.3.4, =0.9.2, =0.9.1, =0.4.0, =0.8.2, =0.11.0-beta.0 Source cves: CVE-2019-25003 Source advisory:...

b2b (=0.1.0), box_stream (>=0.1.0 <=0.2.1) +57 more potentially affected by CVE-2019-25002 via sodiumoxide (>=0.0.10 <=0.1.0)

sodiumoxide CARGO version =0.0.10, =0.1.0, =0.0.7, =0.1.0, =0.5.0, =0.0.0, =2.0.1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.9, =0.2.5 and more Source cves: CVE-2019-25002 Source advisory: OSV:RUSTSEC-2019-0026...

ALPINE-CVE-2019-16760

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...

alpha-g-analysis (=0.1.0), apecrunch (>=0.0.1 <=0.0.3) +179 more potentially affected by CVE-2019-15547 +1 more via ncurses (>=5.101.0 <=6.0.1)

ncurses CARGO version =5.101.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.8.7 - btui =0.6.5 and more Source cves: CVE-2019-15547, CVE-2019-15548 Source advisory: OSV:RUSTSEC-2019-0006...

askii (>=0.1.0 <=0.5.4), atomsh (=0.1.0) +58 more potentially affected by CVE-2019-15546 via pancurses (>=0.11.0 <=0.9.0)

pancurses CARGO version =0.11.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =0.1.0, =0.1.0, =0.16.0, =0.4.0, =0.13.1, =0.2.0, =0.3.1 and more Source cves: CVE-2019-15546 Source advisory: OSV:RUSTSEC-2019-0005...

afterburn (=4.1.0), aoaddons (>=0.1.1 <=0.1.6) +50 more potentially affected by CVE-2019-25054 via pnet (>=0.12.0 <=0.26.0)

pnet CARGO version =0.12.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: CVE-2019-25054 Source advisory: OSV:RUSTSEC-2019-0037...

auth (=0.1.0), dat-network-protocol (>=0.1.3 <=0.1.4) +18 more potentially affected by CVE-2019-15544 via protobuf (>=0.0.10 <=1.7.4)

protobuf CARGO version =0.0.10, =0.1.3, =0.3.1, =0.3.1, =1.7.2, =0.3.1, =0.0.1, =0.1.0, =0.2.2 - roboime-next-protocol =0.1.0 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...

Brains (>=0.1.0 <=0.2.0), Route16 (=0.0.1) +862 more potentially affected by CVE-2019-15544 via protobuf (>=2.0.2 <=2.5.0)

protobuf CARGO version =2.0.2, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.13.0, =0.11.0, =0.11.0, =1.1.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0, =0.17.0 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...

buf-ref-reader (=0.3.0), buf_redux (>=0.7.0 <=0.8.1) +9 more potentially affected by CVE-2019-15543 via slice-deque (=0.1.16)

slice-deque CARGO version =0.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on slice-deque and may be impacted: - buf-ref-reader =0.3.0 - bufredux =0.7.0, =0.1.0, =0.2.0, =0.1.0, =0.12.0, =0.1.0, =0.2.0 - seqio =0.3.0 - stocker =0.2.0 Source cves:...

acto-rs (>=0.2.9 <=0.3.7), alumina (>=0.1.0 <=0.1.1) +378 more potentially affected by CVE-2018-25023 via smallvec (>=0.1.8 <=0.5.1)

smallvec CARGO version =0.1.8, =0.2.9, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.2, =1.0.0, =1.1.0 - approveapi =0.1.0 and more Source cves: CVE-2018-25023 Source advisory: OSV:RUSTSEC-2018-0018...

BeerHolderBot (>=0.3.5 <=0.3.8), BiliupApi (>=0.1.0 <=0.1.7) +2447 more potentially affected by unknown CVE via serde_yaml (>=0.6.2 <=0.8.26)

serdeyaml CARGO version =0.6.2, =0.3.5, =0.1.0, =0.1.0, =0.0.9, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.1.1, =0.1.1, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0005...

Boa (>=0.9.0 <=0.10.0), GetPDB (>=0.1.0 <=1.0.1) +5077 more potentially affected by CVE-2018-20991 via smallvec (>=0.6.13 <=0.6.14)

smallvec CARGO version =0.6.13, =0.9.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.5.3, =0.1.0, =0.5.0, =0.5.0, =0.5.2 and more Source cves: CVE-2018-20991 Source advisory: OSV:RUSTSEC-2018-0003...