29 matches found
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: sccache, shadowsocks-rust, rye, wash, nushell, buck2, linkerd2-proxy, samply, uv, wadm, wasm-pack, sqlx, wasmtime, rustls-ffi, zizmor, zola, lychee, atuin, rustup, deno, wasmcloud, pixi, sdp-k8s-injector, tealdeer, cargo-audit, zed, parseable, xh,...
CVE-2026-50185 vulnerabilities
Vulnerabilities for packages: apollo-router, yazi, mountpoint-s3, deno, komodo, pixi...
GHSA-3RJW-M598-PQ24 vulnerabilities
Vulnerabilities for packages: apollo-router, yazi, mountpoint-s3, deno, komodo, pixi...
GHSA-Q53Q-5R4J-5729 rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
CVE-2025-4574 vulnerabilities
Vulnerabilities for packages: cargo-audit, yara-x, samply, ruff, zed, wadm, yazi, deno, nushell, cargo-c, rust-analyzer, wasmcloud, pixi, oxipng, fd, oranda, starship, lychee...
CVE-2025-4574 vulnerabilities
Vulnerabilities for packages: ztunnel, ztunnel-fips, samply, deno, yara-x, zed, oranda, wadm, oxipng, fd, yazi, nushell, cargo-c, pixi, lychee, cargo-audit, rust-analyzer, wasmcloud, ruff, starship...
CVE-2025-62518 vulnerabilities
Vulnerabilities for packages: pixi...
GHSA-J5GW-2VRG-8FGX vulnerabilities
Vulnerabilities for packages: pixi...
CVE-2025-62518 vulnerabilities
Vulnerabilities for packages: pixi...
GHSA-J5GW-2VRG-8FGX vulnerabilities
Vulnerabilities for packages: pixi...
CVE-2025-55159 vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, linkerd2-proxy, uv, buck2, linkerd-extension-init, mdbook, pixi, zola, linkerd2, efs-utils...
GHSA-QX2V-8332-M4FV vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, linkerd2-proxy, uv, buck2, linkerd-extension-init, mdbook, pixi, zola, linkerd2, efs-utils...
GHSA-QX2V-8332-M4FV vulnerabilities
Vulnerabilities for packages: mdbook, zola, linkerd2-proxy, uv, shadowsocks-rust, linkerd-extension-init, jujutsu, pixi, efs-utils, linkerd2, buck2...
CVE-2025-55159 vulnerabilities
Vulnerabilities for packages: mdbook, zola, linkerd2-proxy, uv, shadowsocks-rust, linkerd-extension-init, jujutsu, pixi, efs-utils, linkerd2, buck2...
GHSA-4P46-PWFR-66X6 vulnerabilities
Vulnerabilities for packages: rye, kdash, ntpd-rs, atuin, samply, zizmor, deno, linkerd-extension-init, zed, sccache, oranda, rustup, zola, wadm, wasmtime, xh, wash, sdp-k8s-injector, rustls-ffi, qdrant, parseable, sqlx, nushell, tealdeer, shadowsocks-rust, fnm, pixi, lychee, buck2, wasm-pack,...
GHSA-QG5G-GV98-5FFH vulnerabilities
Vulnerabilities for packages: zed, wasm-pack, cargo-audit, ntpd-rs, wadm, qdrant, wasmcloud, wash, xh, uv, tealdeer, fnm, pixi, parseable...
GHSA-2326-PFPJ-VX3H vulnerabilities
Vulnerabilities for packages: wash, deno, nushell, parseable, pixi...