GHSA-R57R-J98G-587F Pointer dereference in nanorand

An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...

GHSA-C5HX-W945-J4PQ Memory flaw in zeroize_derive

An issue was discovered in the zeroizederive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum...

Memory flaw in zeroize_derive

An issue was discovered in the zeroizederive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum...

Abomonation transmutes &T to and from &[u8] without sufficient constraints

An issue was discovered in the abomonation crate through version 0.7.3 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass...

abomonation_derive (>=0.1.0, <=0.5.0), abomonation_derive_ng (0.1.0) +30 more potentially affected by CVE-2021-45708 via abomonation (>=0.4.6, <=0.7.3)

abomonation CARGO version =0.4.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.1, =0.1.1, =0.1.1, =0.1.0, =0.0.2, =0.1.0, =0.2.0, =0.3.1 and more Source cves: CVE-2021-45708 Source advisory: OSV:GHSA-5VWC-R48G-WJ6C...

acid-store (>=0.8.0, <=0.11.2), alsa (0.5.1) +13 more potentially affected by CVE-2021-45707 via nix (0.21.0)

nix CARGO version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on nix and may be impacted: - acid-store =0.8.0, =0.1.4, =0.1.4, =0.1.4, =4.0.0, =0.1.0-alpha.1, =0.1.2, =0.10.0, =1.4.10, =0.13.0-alpha.1, =0.0.8, =0.0.13 Source cves: CVE-2021-4570...

acid-store (>=0.2.0, <=0.11.2), acidalia (>=0.1.0, <=0.1.3) +1253 more potentially affected by CVE-2021-45707 via nix (>=0.16.1, <=0.20.0)

nix CARGO version =0.16.1, =0.2.0, =0.1.0, =0.1.0, =0.0.2, =4.3.1, =0.0.9, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.5.0, =0.10.0, =0.13.0 - albedo 0.0.1-beta.0 and more Source cves: CVE-2021-45707 Source advisory: OSV:GHSA-76W9-P8MG-J927...

Uncontrolled Resource Consumption in simple_asn1

An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...

GHSA-G4H2-4WVH-GRC5 Uncontrolled Resource Consumption in simple_asn1

An issue was discovered in the simpleasn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f...

a2 (>=0.2.0, <=0.5.3), aahc (0.1.0) +6617 more potentially affected by CVE-2021-45710 via tokio (>=0.1.16, <=1.8.1)

tokio CARGO version =0.1.16, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.3, =0.2.0, =0.5.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.2.0 and more Source cves: CVE-2021-45710 Source advisory: OSV:GHSA-FG7R-2G4J-5CGR...

GHSA-XRG3-HMF3-RVGW Path Traversal in rust-embed

When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...

Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createcollation has a use-after-free...

Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...

GHSA-92CX-4XM7-JR9M Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createscalarfunction has a use-after-free...

Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...

GHSA-F6F2-3W33-54R9 Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createaggregatefunction has a use-after-free...

GHSA-G4G4-3PQW-8M7F Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollbackhook has a use-after-free...

Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...

GHSA-4QR3-M7WW-HH9G Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commithook has a use-after-free...

Use After Free in rusqlite

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. createwindowfunction has a use-after-free...