cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +44 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)

git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...

7ghost (>=4.11.0, <=4.11.46), 90crew-sqlite-async (0.0.4) +265 more potentially affected by CVE-2022-43441 via sqlite3 (>=5.0.0, <=5.1.4)

sqlite3 NPM version =5.0.0, =4.11.0, =0.1.0, =0.0.15, =0.0.15, =1.1.0, =12.1.0-alpha.6, =2.0.11, =0.2.5, =6.1.4, =6.1.4, =7.0.1, =6.1.4, =0.1.3-alpha.0, =0.3.0 and more Source cves: CVE-2022-43441 Source advisory: OSV:GHSA-JQV5-7XPX-QJ74...

annatar (0.6.1), aoer-plotty-rs (>=0.2.1, <=0.4.1) +119 more potentially affected by unknown CVE via const-cstr (>=0.1.0, <=0.3.0)

const-cstr CARGO version =0.1.0, =0.2.1, =0.3.6, =0.5.0, =0.1.0, =0.1.0, =0.11.0+8.3.2, =0.0.1, =1.0.0, =1.3.3 - capsicum 0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0020...

cacheline-ef (>=1.0.0, <=1.1.0), dsi-bitstream (0.4.2) +8 more potentially affected by unknown CVE via maligned (0.2.1)

maligned CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on maligned and may be impacted: - cacheline-ef =1.0.0, =0.4.0, =0.6.0, =0.1.6, =0.1.0, =0.1.0, =0.4.0, =0.4.2 - vframe 0.3.2 Source cves: unknown CVE Source advisory:...

@ekyc_qoobiss/qbs-cid-cmp (>=1.0.5, <=1.5.9), @ekyc_qoobiss/qbs-ect-cmp (>=1.2.0, <=4.8.0) +60 more potentially affected by CVE-2023-26487 via vega (>=5.0.0, <=5.22.1)

vega NPM version =5.0.0, =1.0.5, =1.2.0, =0.0.2, =0.0.4, =0.1.2, =1.0.0, =1.0.7, =0.6.2, =0.1.0, =1.0.1, =0.11.4, =0.11.8 and more Source cves: CVE-2023-26487 Source advisory: OSV:GHSA-W5M3-XH75-MP55...

abrute (>=0.1.7, <=0.1.9), alass-cli (>=1.0.0, <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.7.1, <=0.8.7)

ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-MRRW-GRHQ-86GF...

ani-tui (>=0.1.0, <=0.2.1), atomic-server (>=0.33.0, <=0.34.0) +107 more potentially affected by unknown CVE via kuchiki (>=0.3.4, <=0.8.1)

kuchiki CARGO version =0.3.4, =0.1.0, =0.33.0, =0.33.0, =0.7.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.8.5 - curseforgewebview 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0019...

a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1081 more potentially affected by CVE-2023-22742 via git2 (>=0.1.21, <=0.16.0)

git2 CARGO version =0.1.21, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...

nfprobe (0.0.1), terminus (>=0.1.0, <=0.2.0) potentially affected by unknown CVE via elf_rs (>=0.1.1, <=0.1.3)

elfrs CARGO version =0.1.1, =0.1.0, =0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-G6PW-999W-J75M...

ablavema (0.4.2), acick (>=0.0.6, <=0.2.0) +258 more potentially affected by CVE-2022-45299 via webbrowser (>=0.1.3, <=0.7.1)

webbrowser CARGO version =0.1.3, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.1, =0.1.0, =0.1.0, =1.0.9, =0.1.0, =0.1.18, =0.1.21 and more Source cves: CVE-2022-45299 Source advisory: OSV:GHSA-M589-MV4Q-P7RJ...

deno_bench_util (>=0.73.0, <=0.79.0), deno_broadcast_channel (>=0.73.0, <=0.79.0) +37 more potentially affected by unknown CVE via tokio (>=1.21.1, <=1.24.0)

tokio CARGO version =1.21.1, =0.73.0, =0.73.0, =0.11.0, =0.161.0, =0.93.0, =0.102.0, =0.66.0, =0.15.0, =0.73.0, =0.71.0, =0.87.0, =0.79.0, =0.110.0, =0.80.0, =0.86.0 - denowebidl 0.85.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0005...

a2 (>=0.5.0-alpha.1, <=0.5.3), aahc (0.1.0) +4871 more potentially affected by unknown CVE via tokio (>=0.2.0-alpha.1, <=1.18.2)

tokio CARGO version =0.2.0-alpha.1, =0.5.0-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0005...

async-debug (>=0.1.0, <=0.1.3), async-http-proxy (>=1.2.1, <=1.2.4) +133 more potentially affected by CVE-2023-22466 via tokio (>=1.7.1, <=1.18.2)

tokio CARGO version =1.7.1, =0.1.0, =1.2.1, =0.2.1, =2.2.0, =0.4.0, =0.16.0, =0.1.0, =0.14.0, =0.33.2 - clashctl 0.2.2 and more Source cves: CVE-2023-22466 Source advisory: OSV:GHSA-7RRJ-XR53-82P7...

@arve.knudsen/bankai (>=9.6.0, <=9.10.14), @citation-js/browserify-disc (1.3.4) +63 more potentially affected by CVE-2020-36632 via flat (>=1.0.0, <=1.6.0)

flat NPM version =1.0.0, =9.6.0, =2.6.0, =1.0.0, =1.0.0-1, =0.0.1, =0.0.1, =0.0.10, =1.0.0, =7.3.0, =9.10.4, =0.0.1, =0.0.3, =0.0.4 and more Source cves: CVE-2020-36632 Source advisory: OSV:GHSA-2J2X-2GPW-G8FM...

can2040 (>=0.1.2, <=0.1.5), card10-alloc (>=0.1.0, <=0.1.1) +13 more potentially affected by unknown CVE via alloc-cortex-m (>=0.2.2, <=0.4.4)

alloc-cortex-m CARGO version =0.2.2, =0.1.2, =0.1.0, =0.1.0, =0.0.4, =0.3.2, =0.1.0, =0.1.0, =0.5.6, =0.1.0, =0.1.1, =0.0.2, =0.0.11 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0073...

Google Launches OSV-Scanner Tool to Identify Open Source Vulnerabilities

Google on Tuesday announced the open source availability of OSV-Scanner, a scanner that aims to offer easy access to vulnerability information about various projects. The Go-based tool, powered by the Open Source Vulnerabilities OSV database, is designed to connect "a project's list of dependenci...

blockbuster (0.0.2) potentially affected by unknown CVE via mpl-bubblegum (0.1.1)

mpl-bubblegum CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mpl-bubblegum and may be impacted: - blockbuster 0.0.2 Source cves: unknown CVE Source advisory: OSV:GHSA-8R76-FR72-J32W...

auditor (>=0.0.1, <=0.0.2), avrisp (0.3.0) +29 more potentially affected by unknown CVE via claim (>=0.3.1, <=0.5.0)

claim CARGO version =0.3.1, =0.0.1, =0.1.0, =0.3.0, =0.1.0, =0.2.0, =0.1.1, =2.0.0, =0.1.0, =0.0.1, =0.0.2, =0.9.0, =0.8.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0077...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.0), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=5.7.6) +65 more potentially affected by CVE-2022-22984 via snyk-python-plugin (>=1.0.0, <=1.24.0)

snyk-python-plugin NPM version =1.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.11, =1.0.1 and more Source cves: CVE-2022-22984 Source advisory: OSV:GHSA-4X6G-3CMX-W76R...

@adobe/git-server (>=0.9.17-pre.6, <=1.0.5), @adobe/helix-cli (>=0.3.0-SNAPSHOT.293, <=6.1.0) +56 more potentially affected by CVE-2022-22984 via snyk-sbt-plugin (>=2.0.0, <=2.15.0)

snyk-sbt-plugin NPM version =2.0.0, =0.9.17-pre.6, =0.3.0-SNAPSHOT.293, =2.6.0, =1.0.5-SNAPSHOT.105, =0.0.4, =8.0.36, =5.0.22, =3.10.42, =0.0.70, =0.5.8, =3.2.4, =0.0.2, =0.0.7, =1.0.1 - @ericblade/quagga2-redux-middleware 1.0.1 and more Source cves: CVE-2022-22984 Source advisory:...