dfx-core (0.0.1), ehsm (>=0.1.0, <=0.1.1) +5 more potentially affected by unknown CVE via pkcs11 (0.5.0)

pkcs11 CARGO version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on pkcs11 and may be impacted: - dfx-core 0.0.1 - ehsm =0.1.0, =0.2.0, =0.1.0-alpha.0, =0.1.0, =0.0.1, =0.2.1 - tpm-change-pin 0.1.0 Source cves: unknown CVE Source advisory:...

RUSTSEC-2022-0100 Use After Free with `externref`s in Wasmtime

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5fhj-g3p3-pq9g. For more information see the GitHub-hosted security advisory...

RUSTSEC-2022-0101 Miscompilation of constant values in division on AArch64

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7f6x-jwh5-m9r4. For more information see the GitHub-hosted security advisory...

Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory...

RUSTSEC-2022-0095 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory...

amethyst (>=0.11.0, <=0.15.3), amethyst-console (0.1.0) +200 more potentially affected by unknown CVE via clipboard (>=0.1.2, <=0.5.0)

clipboard CARGO version =0.1.2, =0.11.0, =0.2.0, =0.1.0, =0.8.0, =0.6.0, =0.4.0, =0.8.0, =0.2.0, =0.6.0, =0.1.0, =1.4.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0056...

GHSA-3M6F-3GFG-4X56 Panic on incorrect date input to `simple_asn1`

Version 0.6.0 of the simpleasn1 crate panics on certain malformed inputs to its parsing functions, including fromder and derdecode. Because this crate is frequently used with inputs from the network, this should be considered a security vulnerability. The issue occurs when parsing the old ASN.1...

Panic on incorrect date input to `simple_asn1`

Version 0.6.0 of the simpleasn1 crate panics on certain malformed inputs to its parsing functions, including fromder and derdecode. Because this crate is frequently used with inputs from the network, this should be considered a security vulnerability. The issue occurs when parsing the old ASN.1...

abc (>=0.1.0, <=0.2.3), aerospike (>=0.0.1, <=1.3.0) +314 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.2.12)

crossbeam CARGO version =0.1.6, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.4.0, =0.4.0, =0.4.0, =0.0.6, =0.0.9 - bio 0.3.13 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0029...

abci-storage (0.0.3), arcon_backend (>=0.1.0, <=0.1.1) +138 more potentially affected by unknown CVE via rocksdb (>=0.1.1, <=0.18.0)

rocksdb CARGO version =0.1.1, =0.1.0, =0.2.0, =0.2.0, =0.1.1, =1.2.0-alpha-1, =0.6.0, =6.0.0, =0.1.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0046...

novel (0.4.2), salvo (>=0.1.5, <=0.1.6) +4 more potentially affected by unknown CVE via double-checked-cell (>=1.1.0, <=2.1.0)

double-checked-cell CARGO version =1.1.0, =0.1.5, =0.1.5, =0.1.5, =0.1.0, =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0024...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), abci-rs (0.2.0) +424 more potentially affected by unknown CVE via crossbeam-queue (>=0.1.2, <=0.2.0)

crossbeam-queue CARGO version =0.1.2, =0.5.0-alpha.6, =0.0.2, =0.0.1, =0.1.0-alpha.2, =0.1.5, =0.12.0, =0.5.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0021...

a2 (>=0.2.0, <=0.3.6), abc (>=0.1.0, <=0.2.3) +502 more potentially affected by unknown CVE via crossbeam (>=0.1.6, <=0.6.0)

crossbeam CARGO version =0.1.6, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.2.0, =0.11.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.7.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0020...

a2 (>=0.2.0, <=0.5.3), abci-rs (0.10.0) +5476 more potentially affected by unknown CVE via hyper (>=0.0.1, <=0.14.11)

hyper CARGO version =0.0.1, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.9.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0022...

abstract-boot (>=0.2.0-beta.4, <=0.2.0-beta.7), ace-test-lib (0.1.0) +711 more potentially affected by unknown CVE via rust-crypto (0.2.36)

rust-crypto CARGO version 0.2.36 is affected by a known vulnerability. The following packages have a transitive dependency on rust-crypto and may be impacted: - abstract-boot =0.2.0-beta.4, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.1.0, =0.2.0, =0.8.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more...

RUSTSEC-2022-0096 Invalid drop of VMExternRef from partially-initialized instances in the pooling instance allocator

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-88xq-w8cq-xfg7. For more information see the GitHub-hosted security advisory...

a4 (>=0.0.2, <=0.0.4), aaa_csv_challenge (0.1.0) +3960 more potentially affected by unknown CVE via structopt (>=0.0.3, <=0.3.26)

structopt CARGO version =0.0.3, =0.0.2, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0104...

a2kit (>=0.1.0, <=2.0.6), actions-github (>=0.0.2, <=0.1.0) +681 more potentially affected by unknown CVE via json (>=0.3.4, <=0.12.4)

json CARGO version =0.3.4, =0.1.0, =0.0.2, =0.0.1, =0.1.0, =7.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.9.0, =1.0.0, =1.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0081...

a2 (>=0.3.6, <=0.5.0-alpha.1), abci-storage (0.0.3) +1466 more potentially affected by unknown CVE via owning_ref (>=0.1.4, <=0.4.1)

owningref CARGO version =0.1.4, =0.3.6, =0.1.0, =0.5.0-rc.0, =0.5.0-rc.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0040...

buster (0.1.0), glog (0.1.0) +4 more potentially affected by unknown CVE via thread_local (1.0.1)

threadlocal CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on threadlocal and may be impacted: - buster 0.1.0 - glog 0.1.0 - simconnect 0.1.4 - skia-bindings =0.37.0, =0.37.0, =0.5.0, =0.5.1 Source cves: unknown CVE Source advisory:...