acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1253 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:RUSTSEC-2021-0119...

acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...

acid-store (>=0.12.0, <=0.14.2), aliyundrive-fuse (>=0.1.0, <=0.1.14) +41 more potentially affected by unknown CVE via fuser (>=0.4.1, <=0.15.1)

fuser CARGO version =0.4.1, =0.12.0, =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.2, =0.6.0, =1.5.5, =0.2.5, =0.2.82 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0154...

mdbook-cat-prep (>=1.0.0, <=1.0.8), mdbook-curly-quotes (0.3.0) +24 more potentially affected by CVE-2020-26297 via mdbook (>=0.2.3, <=0.3.7)

mdbook CARGO version =0.2.3, =1.0.0, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.2.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-26297 Source advisory: OSV:GHSA-GX5W-RRHP-F436...

aurelius (>=0.7.0, <=0.7.5), basiliq (>=0.1.0, <=0.1.2) +23 more potentially affected by CVE-2021-29938 via slice-deque (>=0.1.16, <=0.2.4)

slice-deque CARGO version =0.1.16, =0.7.0, =0.1.0, =0.7.0, =0.1.0, =0.13.1, =0.1.2, =0.9.0, =0.1.0, =0.2.0, =0.1.1, =0.1.0, =1.2.0 and more Source cves: CVE-2021-29938 Source advisory: OSV:GHSA-P9GF-GMFV-398M...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:GHSA-7QCC-G2M9-8533...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2021-28037 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2021-28037 Source advisory: OSV:GHSA-GPPW-3H6H-V6Q2...

abrute (>=0.1.7, <=0.1.9), alipay-rs (>=0.2.0, <=0.4.6) +94 more potentially affected by CVE-2020-35884 via tiny_http (>=0.4.1, <=0.7.0)

tinyhttp CARGO version =0.4.1, =0.1.7, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =0.1.5, =0.1.1, =0.15.7, =0.1.0, =0.1.0, =0.1.17 and more Source cves: CVE-2020-35884 Source advisory: OSV:GHSA-7V2R-WXMG-MGVC...

OSV-2021-1143 UNKNOWN WRITE in QtPrivate::QPodArrayOps<QPainterPath::Element>::copyAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 This is the same issue as OSV-2021-1121 which it replaced after that one was closed wrongly. Crash type: UNKNOWN WRITE Crash state: QtPrivate::QPodArrayOps::copyAppend QtPrivate::QCommonArrayOps::growAppend QList::append...

OSV-2021-1121 UNKNOWN WRITE in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 This is the same issue as OSV-2021-1143 which replaced this one after it was closed wrongly. Crash type: UNKNOWN WRITE Crash state: QtPrivate::QCommonArrayOps::growAppend QPainterPath::addPath QPathClipper::intersect...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2021-38511 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2021-38511 Source advisory: OSV:RUSTSEC-2021-0080...

OSV-2021-928 UNKNOWN WRITE in g_array_append_vals

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35890 Crash type: UNKNOWN WRITE Crash state: garrayappendvals gbytearrayappend fubytearrayappendbytes...

CVE-2020-36402

Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf687f53a2823fc087be6c1a7e is cited in the OSV "fixed" field but does not have a code change...

Code injection

Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf687f53a2823fc087be6c1a7e is cited in the OSV "fixed" field but does not have a code change...

CVE-2020-36402

Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf687f53a2823fc087be6c1a7e is cited in the OSV "fixed" field but does not have a code change...

@solid/community-server (0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (0.4.3)

@solid/identity-token-verifier NPM version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server 0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

myelin-engine (>=0.1.0, <=0.14.2), nphysics_testbed2d (>=0.4.0, <=0.10.0) +6 more potentially affected by unknown CVE via nphysics2d (>=0.10.3, <=0.24.0)

nphysics2d CARGO version =0.10.3, =0.1.0, =0.4.0, =0.5.0, =0.5.0, =0.5.0, =0.4.0, =0.0.2, =0.2.2, =0.11.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0149...

axosnake (>=0.1.0, <=0.1.4), bevy_rapier2d (>=0.1.1, <=0.4.0) +22 more potentially affected by unknown CVE via ncollide2d (>=0.15.4, <=0.33.0)

ncollide2d CARGO version =0.15.4, =0.1.0, =0.1.1, =0.0.0, =0.18.0, =0.0.1, =0.1.0, =0.15.3, =0.8.0, =0.4.0, =0.5.0, =0.5.0, =0.5.0, =0.46.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0151...

alexcrichton-cranelift-native (>=0.52.0, <=0.53.0), alexcrichton-cranelift-simplejit (0.53.0) +152 more potentially affected by CVE-2021-45687 via raw-cpuid (>=4.0.0, <=8.1.2)

raw-cpuid CARGO version =4.0.0, =0.52.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.26.1, =0.6.2, =0.5.0, =0.2.0, =0.5.1 and more Source cves: CVE-2021-45687 Source advisory: OSV:RUSTSEC-2021-0089...