aide (>=0.1.0 <=0.4.3), bpxe (>=0.1.0 <=0.1.2) +38 more potentially affected by unknown CVE via linkme (>=0.1.6 <=0.2.10)

linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...

Druid_task1 (=0.1.0), UWUWUW (>=0.13.2 <=0.13.4) +188 more potentially affected by unknown CVE via gtk3-macros (>=0.14.0 <=0.18.2)

gtk3-macros CARGO version =0.14.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.2.0, =0.29.2, =0.1.0, =0.1.0, =0.2.0, =0.9.0, =0.12.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0419...

Druid_task1 (=0.1.0), UWUWUW (>=0.13.2 <=0.13.4) +274 more potentially affected by unknown CVE via atk (>=0.14.0 <=0.9.0)

atk CARGO version =0.14.0, =0.13.2, =1.0.0, =0.2.0, =0.1.0, =0.1.2, =0.2.0, =0.21.0, =0.1.0, =0.1.0, =0.2.0, =0.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0413...

acme-dns-rust (>=1.0.0 <=1.0.6), asfa (>=0.1.0 <=0.5.2) +72 more potentially affected by unknown CVE via whoami (>=0.5.3 <=1.2.3)

whoami CARGO version =0.5.3, =1.0.0, =0.1.0, =3.0.0, =0.60.0, =0.60.0, =0.1.0, =0.27.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.2.1, =0.0.0, =0.0.1, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0020...

abi-stable-host-api (=0.1.1), abi_stable (>=0.2.0 <=0.11.3) +256 more potentially affected by unknown CVE via generational-arena (>=0.1.0 <=0.2.9)

generational-arena CARGO version =0.1.0, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.7, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...

a-gpt (>=0.1.0 <=0.4.0), abacuz (=0.1.1) +885 more potentially affected by CVE-2024-24575 +1 more via libgit2-sys (>=0.10.0 <=0.15.2+1.6.4)

libgit2-sys CARGO version =0.10.0, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.2.0, =1.4.7 - amisgitpm =0.0.1 - android-cli =0.2.0 - angreal =2.0.0-rc.1 and more Source cves: CVE-2024-24575, CVE-2024-24577 Source advisory: OSV:RUSTSEC-2024-0013...

BeerHolderBot (>=0.1.0 <=0.3.6), GetPDB (>=0.1.0 <=1.0.1) +4593 more potentially affected by CVE-2019-9514 via h2 (>=0.1.26 <=0.3.21)

h2 CARGO version =0.1.26, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0-alpha.0 and more Source cves: CVE-2019-9514 Source advisory: OSV:RUSTSEC-2024-0003...

areq (=0.1.0-alpha), bws-web-server (>=0.1.0 <=0.1.1) +26 more potentially affected by CVE-2019-9514 via h2 (=0.4.14)

h2 CARGO version =0.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on h2 and may be impacted: - areq =0.1.0-alpha - bws-web-server =0.1.0, =0.5.2, =0.1.0, =1.0.0, =1.5.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: CVE-2019-9514...

async-ssh2-tokio (>=0.2.0 <=0.8.4), dev-tunnels (=0.1.0) +5 more potentially affected by CVE-2023-48795 via russh (>=0.34.0 <=0.39.0)

russh CARGO version =0.34.0, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.4.1 - tunnels =0.1.0 Source cves: CVE-2023-48795 Source advisory: OSV:GHSA-45X7-PX36-X8W8...

at51 (>=0.1.1 <=0.4.1), atrac3p-decoder (>=0.1.0 <=0.1.2) +51 more potentially affected by CVE-2023-53156 via transpose (=0.1.0)

transpose CARGO version =0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on transpose and may be impacted: - at51 =0.1.1, =0.1.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =2.6.2, =0.6.0, =0.1.0, =0.1.0, =0.1.1 and more Source...

BiliupApi (>=0.1.0 <=0.1.7), BrandoCulqi (=1.0.1) +335 more potentially affected by CVE-2023-49092 via rsa (>=0.1.2 <=0.8.2)

rsa CARGO version =0.1.2, =0.1.0, =1.0.0, =1.0.1, =0.0.1, =0.12.0, =0.5.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =0.3.11, =0.3.21 and more Source cves: CVE-2023-49092 Source advisory: OSV:GHSA-C38W-74PG-36HR...

bitcoin-harness (=0.1.0), bitcoin_rpc_client (>=0.5.0 <=0.6.1) +80 more potentially affected by unknown CVE via openssl (>=0.10.22 <=0.10.57)

openssl CARGO version =0.10.22, =0.5.0, =0.2.0, =0.0.0, =0.0.1, =0.3.3, =0.6.25, =0.1.0-alpha.0, =0.1.24, =0.37.0, =0.4.0, =0.37.0, =0.37.0, =0.38.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0072...

BiliupApi (>=0.1.0 <=0.1.7), BrandoCulqi (=1.0.1) +335 more potentially affected by CVE-2023-49092 via rsa (>=0.1.2 <=0.8.2)

rsa CARGO version =0.1.2, =0.1.0, =1.0.0, =1.0.1, =0.0.1, =0.12.0, =0.5.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =0.3.11, =0.3.21 and more Source cves: CVE-2023-49092 Source advisory: OSV:RUSTSEC-2023-0071...

btrfsutil (=0.2.0), btrfsutil-fake (>=0.2.0 <=0.2.0-8324fe2) +15 more potentially affected by unknown CVE via loopdev (>=0.1.3 <=0.4.0)

loopdev CARGO version =0.1.3, =0.2.0, =0.1.0, =0.1.0, =0.6.3, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =2.4.2, =3.5.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0088...

acme-client (>=0.1.0 <=0.2.0), aerial (=0.1.0) +691 more potentially affected by unknown CVE via hpack (>=0.2.0 <=0.3.0)

hpack CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.0.1, =0.1.0, =0.5.0, =0.1.3, =0.1.13 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0084...

OpenDataSH_twitter_notifier (>=0.1.0 <=0.1.2), a2 (>=0.2.0 <=0.6.2) +3003 more potentially affected by CVE-2018-16875 via webpki (>=0.18.1 <=0.21.4)

webpki CARGO version =0.18.1, =0.1.0, =0.2.0, =0.1.0, =0.2.0-beta.4, =0.1.1, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =1.0.0, =0.1.0, =0.8.0, =0.1.0, =0.2.2, =2.0.0-alpha.4 and more Source cves: CVE-2018-16875 Source advisory: OSV:RUSTSEC-2023-0052...

RUSTSEC-2023-0100 `xrvrv` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the malicious user amaperf and contained a malware payload in build.rs to exfiltrate host information to the attacker. This advisory is to retrospectively document this attempted attack. The version information and download recor...

NT-anchor-spl (>=0.19.0 <=0.19.5), NT-anchor-spl-testnet (=0.19.2) +1606 more potentially affected by CVE-2022-50237 via ed25519-dalek (>=0.9.1 <=2.0.0-pre.0)

ed25519-dalek CARGO version =0.9.1, =0.19.0, =0.4.2, =0.2.0-beta.4, =0.1.0, =0.1.1, =0.1.0, =1.0.5, =0.0.0-alpha, =0.0.1-alpha.1, =0.5.0, =0.5.2, =0.8.0, =0.8.0, =0.8.9 and more Source cves: CVE-2022-50237 Source advisory: OSV:GHSA-W5VR-6QHR-36CC...

RustLibrary (>=0.1.0 <=0.2.0), RustyBox (=0.1.0) +411 more potentially affected by unknown CVE via tui (>=0.10.0 <=0.9.5)

tui CARGO version =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2, =0.1.6, =0.1.0, =0.1.0, =0.0.9, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0049...

GetPDB (>=0.1.0 <=1.0.1), IMAPServer (=0.1.0) +4086 more potentially affected by unknown CVE via memoffset (>=0.1.0 <=0.5.6)

memoffset CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.5.3, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.8.0, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-WFG4-322G-9VQV...