gpiocdev (>=0.4.3, <=0.7.0), gpiocdev-embedded-hal (0.1.0) +1 more potentially affected by CVE-2024-51756 via cap-std (3.0.0)

cap-std CARGO version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cap-std and may be impacted: - gpiocdev =0.4.3, =0.16.0, =0.16.3 Source cves: CVE-2024-51756 Source advisory: OSV:GHSA-HXF5-99XG-86HW...

Fedora: Security Advisory (FEDORA-2023-6f419dc91b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

a11ywatch_cli (>=0.0.5, <=0.6.51), a4 (>=0.0.2, <=0.0.4) +7324 more potentially affected by unknown CVE via proc-macro-error (>=0.2.6, <=1.0.4)

proc-macro-error CARGO version =0.2.6, =0.0.5, =0.0.2, =0.3.0, =0.1.0, =1.0.0, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.4.0, =0.6.0 - ac-library-rs-expander 0.1.0 - acall-cli 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0370...

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...

acid-rs (>=1.1.0, <=1.1.1), agpm_pm (>=0.0.1, <=0.0.2) +836 more potentially affected by unknown CVE via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =2.0.0-rc.1, =0.2.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...

acid-rs (>=1.1.0, <=1.1.1), agpm_pm (>=0.0.1, <=0.0.2) +836 more potentially affected by CVE-2024-24575 +1 more via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.1.13, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =2.0.0-rc.1, =0.2.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2024-24575, CVE-2024-24577 Source advisory: OSV:RUSTSEC-2024-0013...

blurhash-cli (>=0.1.0, <=0.1.1) potentially affected by CVE-2023-42447 via blurhash (0.1.1)

blurhash CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on blurhash and may be impacted: - blurhash-cli =0.1.0, =0.1.1 Source cves: CVE-2023-42447 Source advisory: OSV:RUSTSEC-2023-0083...

RUSTSEC-2023-0100 `xrvrv` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the malicious user amaperf and contained a malware payload in build.rs to exfiltrate host information to the attacker. This advisory is to retrospectively document this attempted attack. The version information and download recor...

chatbot (>=0.0.3, <=0.2.3), chinillaclvmr (>=0.1.24, <=0.2.0) +13 more potentially affected by CVE-2023-53159 via openssl (>=0.10.7, <=0.10.52)

openssl CARGO version =0.10.7, =0.0.3, =0.1.24, =0.1.22, =0.1.24, =0.1.0, =0.1.0-beta.1, =0.1.24, =0.0.1, =0.1.0, =0.1.0, =0.7.1, =0.1.0, =0.9.0, =0.9.4 - ya-client-model 0.2.0 Source cves: CVE-2023-53159 Source advisory: OSV:GHSA-XCF7-RVMH-G6Q4...

aerospike (0.3.0), ag (>=0.7.5, <=0.7.6) +891 more potentially affected by unknown CVE via memoffset (>=0.1.0, <=0.5.6)

memoffset CARGO version =0.1.0, =0.7.5, =0.2.5, =0.5.0, =0.1.0, =0.4.0, =0.5.0, =0.1.0, =0.6.0, =0.5.0, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0045...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +778 more potentially affected by CVE-2023-53159 via openssl (>=0.2.18, <=0.10.52)

openssl CARGO version =0.2.18, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.7.0, =0.1.0, =0.0.10, =0.0.1, =0.1.0, =0.2.0 - apns 0.1.1 - aries 0.1.0 - arubaripple 0.0.1 and more Source cves: CVE-2023-53159 Source advisory: OSV:RUSTSEC-2023-0044...

aesti (>=0.1.0, <=0.3.0), atarashii_imap (0.3.0) +357 more potentially affected by unknown CVE via openssl (>=0.9.24, <=0.10.40)

openssl CARGO version =0.9.24, =0.1.0, =0.1.0, =0.2.0, =0.15.0, =0.3.1, =0.0.1, =0.3.2, =0.1.1, =0.1.4, =0.1.0, =0.1.3, =0.4.0, =0.5.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3GXF-9R58-2GHG...

aesti (>=0.1.0, <=0.3.0), atarashii_imap (0.3.0) +357 more potentially affected by unknown CVE via openssl (>=0.9.24, <=0.10.40)

openssl CARGO version =0.9.24, =0.1.0, =0.1.0, =0.2.0, =0.15.0, =0.3.1, =0.0.1, =0.3.2, =0.1.1, =0.1.4, =0.1.0, =0.1.3, =0.4.0, =0.5.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6HCF-G6GR-HHCR...

barfs (0.1.2), cranefack (0.4.1) +33 more potentially affected by CVE-2023-26489 via cranelift-codegen (>=0.84.0, <=0.90.1)

cranelift-codegen CARGO version =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =0.84.0, =9.0.0, =9.0.0, =23.0.0 and more Source cves: CVE-2023-26489 Source advisory: OSV:GHSA-FF4P-7XRQ-Q5R8...

aubio-sys (>=0.2.0, <=0.2.1), bliss-audio-aubio-sys (>=0.2.0, <=0.2.4) +23 more potentially affected by unknown CVE via ftp (3.0.1)

ftp CARGO version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ftp and may be impacted: - aubio-sys =0.2.0, =0.2.0, =0.0.3, =1.1.1, =0.3.2, =0.5.0, =0.0.1, =0.4.17, =1.0.0, =0.1.0-dev, =0.5.0, =1.2.1, =1.5.0 and more Source cves: unknown CVE...

cargo-crates (>=0.1.3, <=0.1.5), cargo-index-transit (0.1.1) +6 more potentially affected by CVE-2023-22742 via libgit2-sys (0.14.1+1.5.0)

libgit2-sys CARGO version 0.14.1+1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on libgit2-sys and may be impacted: - cargo-crates =0.1.3, =0.1.0, =2.1.8, =2.7.0, =0.6.0, =0.6.2 Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...

almel (>=1.0.0, <=1.3.0), ambassade-debug (>=0.1.0, <=0.2.0) +589 more potentially affected by CVE-2023-22742 via libgit2-sys (>=0.1.13, <=0.13.2+1.4.2)

libgit2-sys CARGO version =0.1.13, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =3.1.3, =0.0.1, =0.1.0, =0.1.0, =0.1.6, =0.2.0 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...

a2s (>=0.1.0, <=0.5.1), abxml (>=0.5.0, <=0.6.2) +132 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3, <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =0.1.0, =0.1.9 - cldr 29.0.0-alpha and more Source cves: CVE-2023-22895 Source advisory: OSV:GHSA-96JV-R488-C2RJ...

a2s (>=0.1.0, <=0.5.1), abxml (>=0.5.0, <=0.6.2) +132 more potentially affected by CVE-2023-22895 via bzip2 (>=0.2.3, <=0.3.3)

bzip2 CARGO version =0.2.3, =0.1.0, =0.5.0, =0.0.1, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.3.0, =2020.5.26, =0.1.0, =0.2.0, =0.1.0, =0.1.9 - cldr 29.0.0-alpha and more Source cves: CVE-2023-22895 Source advisory: OSV:RUSTSEC-2023-0004...

abci-storage (0.0.3), bench-trie (>=0.12.0, <=0.12.2) +224 more potentially affected by unknown CVE via parity-util-mem (>=0.1.0, <=0.12.0)

parity-util-mem CARGO version =0.1.0, =0.12.0, =0.8.8, =1.0.0, =2.0.0, =0.1.0, =0.1.0, =0.2.2 - evan-test-pallet 3.0.0 - fc-db 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0080...