a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +280 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:GHSA-64WV-8VWP-XGW2...

GHSA-64WV-8VWP-XGW2 Use of Uninitialized Resource in ash.

An issue was discovered in the ash crate before 0.33.1 for Rust. util::readspv may read from uninitialized memory locations...

Use of Uninitialized Resource in messagepack-rs

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializestring may read from uninitialized memory locations...

Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

GHSA-HR52-F9VP-582C Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +182 more potentially affected by CVE-2021-45689 via gfx-auxil (>=0.1.0, <=0.9.0)

gfx-auxil CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.3 and more Source cves: CVE-2021-45689 Source advisory: OSV:GHSA-FF2R-XPWQ-6WHJ...

Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

Incorrect reliance on Trait memory layout in mopa

The mopa crate redefines the deprecated TraitObject struct from core::raw. This is done to then transmute a reference to a trait object &dyn Trait for any trait Trait into this struct and retrieve the data field for the purpose of downcasting. This is used to implement downcastrefunchecked, in...

airmash-protocol (>=0.2.0, <=0.3.0), altv-core (0.1.0) +246 more potentially affected by CVE-2021-45695 via mopa (0.2.2)

mopa CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mopa and may be impacted: - airmash-protocol =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.2.0, =0.6.0, =0.7.0, =0.15.3 and more Source cves:...

RPC call failure in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. A getblocktemplate RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction...

ckb-analyzer (0.39.2), ckb-app-config (>=0.37.0-pre, <=0.100.0-rc2) +57 more potentially affected by CVE-2021-45697 via molecule (>=0.2.5, <=0.7.1)

molecule CARGO version =0.2.5, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.40.0, =0.40.0, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.39.1 and more Source cves: CVE-2021-45697 Source advisory: OSV:GHSA-6P3C-V8VC-C244...

Use After Free in tremor-script

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free...

GHSA-Q2X5-6Q7Q-R872 Use After Free in tremor-script

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free...

Denial of Service in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service Nervos CKB blockchain node crash via a dead call that is used as a DepGroup...

GHSA-CW98-CX2M-9QQG Denial of Service in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service Nervos CKB blockchain node crash via a dead call that is used as a DepGroup...

GHSA-2969-8HH9-57JC Allocation of Resources Without Limits or Throttling in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap...

Allocation of Resources Without Limits or Throttling in ckb

An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap...

Use After Free in tremor-script

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free...

GHSA-9QVW-46GF-4FV8 Use After Free in tremor-script

An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free...

boringdb (>=0.2.0, <=0.3.10), bp7 (>=0.7.0, <=0.8.1) +19 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)

nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - boringdb =0.2.0, =0.7.0, =0.13.0, =0.4.0, =0.10.0, =0.3.0, =0.3.14, =0.4.2, =0.4.1, =0.6.1, =0.1.0, =0.1.7, =0.2.1 and more Source cves:...