21 matches found
curl (>=0.4.7 <=0.4.8), dns-lookup (>=0.7.0 <=0.8.1) +5 more potentially affected by CVE-2020-35919 +1 more via socket2 (=0.2.4)
socket2 CARGO version =0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on socket2 and may be impacted: - curl =0.4.7, =0.7.0, =0.3.0, =0.1.0, =0.2.2, =0.2.4 - miow =0.3.0 Source cves: CVE-2020-35919, CVE-2020-35920 Source advisory:...