10775 matches found
diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)
diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:GHSA-J8Q9-5RP9-4MV9...
guion (>=0.1.0, <=0.2.0-dev2), guion_sdl2 (>=0.1.0, <=0.2.0-dev2) potentially affected by CVE-2021-26954 via qwutils (>=0.1.1, <=0.2.0)
qwutils CARGO version =0.1.1, =0.1.0, =0.1.0, =0.2.0-dev2 Source cves: CVE-2021-26954 Source advisory: OSV:GHSA-68P4-PJPF-XWCQ...
tract-linalg (>=0.5.7, <=0.5.8) potentially affected by CVE-2021-25900 via smallvec (0.6.13)
smallvec CARGO version 0.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on smallvec and may be impacted: - tract-linalg =0.5.7, =0.5.8 Source cves: CVE-2021-25900 Source advisory: OSV:GHSA-43W2-9J62-HQ99...
blkar (7.2.7), prcn_lib (0.3.1) +1 more potentially affected by CVE-2021-25900 via smallvec (>=1.0.0, <=1.2.0)
smallvec CARGO version =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2021-25900 Source advisory: OSV:GHSA-43W2-9J62-HQ99...
Async-h1 request smuggling possible with long unread bodies
An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy...
GHSA-RH4W-94HH-9943 MutexGuard::map can cause a data race in safe code
Affected versions of the crate had a Send/Sync implementation for MappedMutexGuard that only considered variance on T, while MappedMutexGuard dereferenced to U. This could of led to data races in safe Rust code when a closure used in MutexGuard::map returns U that is unrelated to T. The issue was...
MutexGuard::map can cause a data race in safe code
Affected versions of the crate had a Send/Sync implementation for MappedMutexGuard that only considered variance on T, while MappedMutexGuard dereferenced to U. This could of led to data races in safe Rust code when a closure used in MutexGuard::map returns U that is unrelated to T. The issue was...
GHSA-9PQX-G3JH-QPQQ Dangling reference in `access::Map` with Constant
An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...
Dangling reference in `access::Map` with Constant
An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with a user-supplied implementation of the Access trait could sometimes lead to dangling references being returned by the map...
cargo-apk (>=0.3.1, <=0.4.0), cargo-authors (>=0.0.1, <=0.4.0) +30 more potentially affected by CVE-2019-16760 via cargo (>=0.4.0, <=0.26.0)
cargo CARGO version =0.4.0, =0.3.1, =0.0.1, =0.1.0, =0.1.0, =0.2.2, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.3.1, =0.1.0, =0.5.1, =0.1.0, =0.2.1 and more Source cves: CVE-2019-16760 Source advisory: OSV:GHSA-9F3P-WVJ7-Q82X...
GHSA-9F3P-WVJ7-Q82X Cargo prior to Rust 1.26.0 may download the wrong dependency
Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...
Cargo prior to Rust 1.26.0 may download the wrong dependency
Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...
RUSTSEC-2022-0028 Use after free in Neon external buffers
Neon provides functionality for creating JavaScript ArrayBuffer and the Buffer subtype instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from...
Use after free in Neon external buffers
Neon provides functionality for creating JavaScript ArrayBuffer and the Buffer subtype instances backed by bytes allocated outside of V8/Node. The JsArrayBuffer::external and JsBuffer::external did not require T: 'static prior to Neon 0.10.1. This allowed creating an externally backed buffer from...
aspiesolutions_core (>=0.0.1-alpha+3, <=0.0.1-alpha.11), directory-tree (0.0.1) +33 more potentially affected by unknown CVE via neon (>=0.8.3, <=0.9.1)
neon CARGO version =0.8.3, =0.0.1-alpha+3, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.16.0, =0.9.0, =0.9.1, =0.1.0, =0.1.0, =0.1.0, =0.10.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0028...
gemachain-bpf-loader-program (1.8.0), lido (1.1.0-patch.1) +42 more potentially affected by CVE-2022-31264 via solana_rbpf (>=0.1.5, <=0.2.24)
solanarbpf CARGO version =0.1.5, =1.2.3, =0.1.1, =0.1.4, =0.1.0, =1.0.2, =3.0.1, =1.6.16, =1.6.16, =1.2.3, =1.2.4 and more Source cves: CVE-2022-31264 Source advisory: OSV:GHSA-FFX3-8QVM-PQ3J...
rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31100 via rulex (>=0.1.0, <=0.3.0)
rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31100 Source advisory: OSV:RUSTSEC-2022-0031...
rulex-bin (>=0.1.0, <=0.3.0), rulex-macro (>=0.1.0, <=0.3.0) potentially affected by CVE-2022-31099 via rulex (>=0.1.0, <=0.3.0)
rulex CARGO version =0.1.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2022-31099 Source advisory: OSV:RUSTSEC-2022-0030...
Solana Rbpf 输入验证错误漏洞
Solana Rbpf is a Rust Virtual Machine and Jit compiler for Ebpf programs from the Solana Foundation in Switzerland. A security vulnerability exists in Solana Rbpf versions prior to 0.2.29, which stems from an integer overflow problem. An attacker can exploit this vulnerability to cause a program ...
