better-config-loader (>=0.1.4, <=0.2.4), chio-config (0.1.0) +67 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.13)

serdeyml CARGO version =0.0.7, =0.1.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =1.0.0, =0.1.29, =0.1.31 - dendryform 0.1.0 - dendryform-ascii 0.1.0 - dendryform-core 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...

aa2nucaln (0.1.1), agent-stream-kit (>=0.9.0, <=0.14.0) +373 more potentially affected by unknown CVE via custom_derive (0.1.7)

customderive CARGO version 0.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on customderive and may be impacted: - aa2nucaln 0.1.1 - agent-stream-kit =0.9.0, =0.4.0, =0.1.1, =0.2.0, =0.1.0, =0.1.0, =3.1.3, =0.3.7, =0.1.0, =0.1.0, =0.1.2 and more Sour...

advisory-db

This is a security advisory database repository for Rust crates published via crates.io. The repository contains a collection of security advisories filed against various Rust crates, with each advisory containing information in TOML format. The advisories are categorized by crate name, and each...

advisory-db

This is a security advisory database for Rust crates published through crates.io. The database is maintained by the RustSec project and contains information on security vulnerabilities in various Rust crates. The database is stored in TOML format and can be consumed by various tools for auditing...

Security update for rav1e

This update for rav1e fixes the following issues: Update crate shlex to 1.3.0: CVE-2024-58266: Fixed command injection bsc1247207 RUSTSEC-2024-0006: Fixed multiple issues involving quote API bsc1230028 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

a2d (>=0.1.0, <=0.1.11), abscissa (>=0.6.0-beta.1, <=0.6.0-rc.0) +1101 more potentially affected by unknown CVE via adler (>=0.2.3, <=1.0.2)

adler CARGO version =0.2.3, =0.1.0, =0.6.0-beta.1, =0.6.0-beta.1, =0.6.0-beta.1, =0.1.5, =0.0.1-dev.10, =0.4.0, =0.2.0, =0.1.0, =0.2.0, =0.1.13, =0.1.0, =0.3.0, =0.1.0, =0.9.1, =0.13.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0056...

remenu (>=0.0.3, <=0.0.5) potentially affected by unknown CVE via xcb (1.2.2)

xcb CARGO version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on xcb and may be impacted: - remenu =0.0.3, =0.0.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0051...

dji-log-parser (>=0.5.0, <=0.5.7) potentially affected by unknown CVE via tsify-next (0.5.6)

tsify-next CARGO version 0.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on tsify-next and may be impacted: - dji-log-parser =0.5.0, =0.5.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0048...

RUSTSEC-2025-0046 Host panic with `fd_renumber` WASIp1 function

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-fm79-3f68-h2fc. For more information see the GitHub-hosted security advisory...

Host panic with `fd_renumber` WASIp1 function

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-fm79-3f68-h2fc. For more information see the GitHub-hosted security advisory...

Possible host crash with host-to-wasm component intrinsics

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-4h67-722j-5pmc For more information see the GitHub-hosted security advisory...

dpx (>=0.1.0, <=0.1.1), espim (>=0.1.0, <=0.2.2) +5 more potentially affected by unknown CVE via zip-extract (>=0.1.3, <=0.2.3)

zip-extract CARGO version =0.1.3, =0.1.0, =0.1.0, =1.0.0, =2.0.0, =0.1.13, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0172...

Fedora 42 : rust-openssl / rust-openssl-sys (2025-c263d3ebd9)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-c263d3ebd9 advisory. - Update the openssl crate to version 0.10.72. - Update the openssl-sys crate to version 0.9.107. This update addresses CVE-2025-3416 / RUSTSEC-2025-0022 a...

Fedora 42 : rust-hickory-proto (2025-99f0d93d68)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-99f0d93d68 advisory. Update to version 0.24.4. Also contains fixes for RUSTSEC-2025-0006. Tenable has extracted the preceding description block directly from the Fedora security...

Low: librsvg2

Issue Overview: RUSTSEC-2024-0429 is a vulnerability discovered in the glib Rust crate affecting versions prior to 0.20.0. The issue involves unsoundness in Iterator and DoubleEndedIterator implementations for glib::VariantStrIter, where passing an immutable reference to a function that mutates t...

CVE-2024-12224

Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname...

cargo-eval (0.1.0), cargo-script (>=0.2.0, <=0.2.8) +10 more potentially affected by unknown CVE via shaman (0.1.0)

shaman CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on shaman and may be impacted: - cargo-eval 0.1.0 - cargo-script =0.2.0, =0.2.9, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory:...

audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +1 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)

mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0027...

a3mo_lib (>=0.1.0, <=0.1.1), abra (0.0.1) +3840 more potentially affected by unknown CVE via rustc-serialize (>=0.1.5, <=0.3.25)

rustc-serialize CARGO version =0.1.5, =0.1.0, =0.1.7, =0.0.6, =0.1.0, =0.2.1, =0.1.4, =0.1.1, =0.1.0, =0.1.0, =0.3.3, =0.1.0, =0.2.1, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0025...

alloy-rs (0.2.1), anndata (0.2.0) +77 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.18.0)

arrow2 CARGO version =0.5.3, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.0.1, =0.2.1, =0.2.2, =0.1.0, =0.1.0, =0.15.0, =0.16.0 - geoarrow-wasm 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0038...