29 matches found
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: atuin, oranda, wasm-pack, nushell, kdash, uv, tealdeer, zed, sqlx, wash, qdrant, deno, samply, wasmcloud, linkerd2-proxy, buck2, rustls-ffi, pixi, shadowsocks-rust, zizmor, linkerd-extension-init, wadm, wasmtime, cargo-audit, parseable, xh, sdp-k8s-injector, rye,...
CVE-2026-50185 vulnerabilities
Vulnerabilities for packages: mountpoint-s3, apollo-router, deno, yazi, komodo, pixi...
GHSA-3RJW-M598-PQ24 vulnerabilities
Vulnerabilities for packages: mountpoint-s3, apollo-router, deno, yazi, komodo, pixi...
GHSA-Q53Q-5R4J-5729 rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
CVE-2025-4574 vulnerabilities
Vulnerabilities for packages: zed, cargo-audit, fd, oranda, rust-analyzer, deno, nushell, oxipng, samply, wasmcloud, yara-x, wadm, starship, cargo-c, pixi, lychee, yazi, ruff...
CVE-2025-4574 vulnerabilities
Vulnerabilities for packages: wadm, samply, wasmcloud, oxipng, oranda, ztunnel, deno, yazi, zed, fd, lychee, cargo-audit, starship, cargo-c, rust-analyzer, nushell, ruff, yara-x, pixi...
CVE-2025-62518 vulnerabilities
Vulnerabilities for packages: pixi...
GHSA-J5GW-2VRG-8FGX vulnerabilities
Vulnerabilities for packages: pixi...
CVE-2025-62518 vulnerabilities
Vulnerabilities for packages: pixi...
GHSA-J5GW-2VRG-8FGX vulnerabilities
Vulnerabilities for packages: pixi...
CVE-2025-55159 vulnerabilities
Vulnerabilities for packages: mdbook, efs-utils, linkerd2, linkerd-extension-init, linkerd2-proxy, uv, zola, buck2, pixi, shadowsocks-rust...
GHSA-QX2V-8332-M4FV vulnerabilities
Vulnerabilities for packages: mdbook, efs-utils, linkerd2, linkerd-extension-init, linkerd2-proxy, uv, zola, buck2, pixi, shadowsocks-rust...
CVE-2025-55159 vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, zola, uv, linkerd-extension-init, linkerd2-proxy, mdbook, efs-utils, jujutsu, pixi, buck2, linkerd2...
GHSA-QX2V-8332-M4FV vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, zola, uv, linkerd-extension-init, linkerd2-proxy, mdbook, efs-utils, jujutsu, pixi, buck2, linkerd2...
GHSA-4P46-PWFR-66X6 vulnerabilities
Vulnerabilities for packages: qdrant, wadm, atuin, rye, samply, sdp-k8s-injector, tealdeer, wasmcloud, ntpd-rs, uv, oranda, wash, deno, zed, kdash, wasm-pack, lychee, xh, cargo-audit, zizmor, shadowsocks-rust, zola, rustup, wasmtime, nushell, sqlx, parseable, sccache, linkerd-extension-init,...
GHSA-QG5G-GV98-5FFH vulnerabilities
Vulnerabilities for packages: qdrant, wadm, xh, uv, parseable, wash, zed, cargo-audit, tealdeer, wasmcloud, wasm-pack, fnm, pixi, ntpd-rs...
GHSA-2326-PFPJ-VX3H vulnerabilities
Vulnerabilities for packages: parseable, wash, nushell, deno, pixi...