bp7 (>=0.7.0, <=0.8.1), cala (0.9.0) +4 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)

nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - bp7 =0.7.0, =0.10.0, =0.8.0, =0.9.1 Source cves: CVE-2021-45705 Source advisory: OSV:RUSTSEC-2021-0114...

GHSA-V5M7-53CV-F3HX crossbeam-channel Undefined Behavior before v0.4.4

Impact The affected version of this crate's the bounded channel incorrectly assumes that Vec::fromiter has allocated capacity that same as the number of iterator elements. Vec::fromiter does not actually guarantee that and may allocate extra memory. The destructor of the bounded channel...

a-bot (0.0.1), a4 (>=0.0.2, <=0.0.4) +10127 more potentially affected by unknown CVE via ansi_term (>=0.5.2, <=0.12.1)

ansiterm CARGO version =0.5.2, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.2.4, =1.0.0, =0.0.2, =0.5.0-rc.0, =0.5.0-rc.0, =0.6.0-pre.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0139...

acidalia (>=0.1.0, <=0.1.3), ajour-widgets (>=0.5.4-rc.1, <=1.0.1) +181 more potentially affected by unknown CVE via spirv_headers (>=1.4.2, <=1.5.0)

spirvheaders CARGO version =1.4.2, =0.1.0, =0.5.4-rc.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0096...

RUSTSEC-2021-0103 Partial read is incorrect in molecule

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...

bellman-keccak256 (0.1.0), bitcoin-cash-ecc (>=0.1.1, <=1.0.0-beta.0) +154 more potentially affected by CVE-2021-38195 via libsecp256k1 (>=0.1.3, <=0.3.5)

libsecp256k1 CARGO version =0.1.3, =0.1.1, =0.1.0, =0.2.0, =0.3.0, =0.2.0, =0.1.0, =0.0.3, =0.0.12 and more Source cves: CVE-2021-38195 Source advisory: OSV:RUSTSEC-2021-0076...

SMTP command injection in lettre

Impact Affected versions of lettre allowed SMTP command injection through an attacker's controlled message body. The module for escaping lines starting with a period wouldn't catch a period that was placed after a double CRLF sequence, allowing the attacker to end the current message and write...

GHSA-QC36-Q22Q-CJW3 SMTP command injection in lettre

Impact Affected versions of lettre allowed SMTP command injection through an attacker's controlled message body. The module for escaping lines starting with a period wouldn't catch a period that was placed after a double CRLF sequence, allowing the attacker to end the current message and write...

a-bot (0.0.1), a11ywatch_cli (>=0.0.5, <=0.6.51) +17426 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)

atty CARGO version =0.1.2, =0.0.5, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.4, =2.0.0 - abi-cafe 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0145...

acacia (0.2.0), adaptive-bezier (0.1.0) +523 more potentially affected by CVE-2021-38190 via nalgebra (>=0.11.2, <=0.26.2)

nalgebra CARGO version =0.11.2, =0.1.0, =0.2.0, =0.1.0, =0.5.0, =0.1.0, =0.6.0, =0.6.0, =0.5.0, =0.15.3 and more Source cves: CVE-2021-38190 Source advisory: OSV:RUSTSEC-2021-0070...

about-filter (0.1.0), acme-v2 (>=0.9.2, <=0.9.3) +120 more potentially affected by unknown CVE via twoway (>=0.1.8, <=0.2.2)

twoway CARGO version =0.1.8, =0.9.2, =0.1.8, =0.2.0, =0.0.1, =0.12.1, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0146...

admin (0.1.1), aes (0.7.0-pre) +345 more potentially affected by unknown CVE via cpuid-bool (>=0.1.2, <=0.2.0)

cpuid-bool CARGO version =0.1.2, =0.5.0, =0.5.0, =0.3.0, =3.5.0, =0.10.0, =0.2.0-pre.1, =2.0.0, =3.0.0, =0.3.0, =0.4.0 - aw-datastore 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0064...

admin (0.1.1), aes (0.6.0) +389 more potentially affected by unknown CVE via aes-soft (0.6.4)

aes-soft CARGO version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aes-soft and may be impacted: - admin 0.1.1 - aes 0.6.0 - aes-ctr 0.6.0 - aes-gcm 0.8.0 - aes-gcm-siv 0.9.0 - aes-keywrap =0.2.0, =0.5.0, =0.3.0, =0.1.0, =0.2.0, =0.1.0, =3.5....

admin (0.1.1), aes (0.6.0) +375 more potentially affected by unknown CVE via aesni (>=0.9.0, <=0.10.0)

aesni CARGO version =0.9.0, =0.2.0, =0.5.0, =0.3.0, =0.1.0, =0.2.0, =0.1.0, =3.5.0, =0.10.0, =0.15.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0059...

age (>=0.5.0, <=0.6.1), amiibo (>=0.1.0, <=0.2.0) +14 more potentially affected by unknown CVE via aes-ctr (>=0.6.0, <=0.99.99)

aes-ctr CARGO version =0.6.0, =0.5.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.2.0, =0.4.0, =0.4.0, =1.0.0, =1.0.1 - nakamoto 0.4.0 - nakamoto-wallet 0.4.0 - osshkeys 0.5.0 - seshat 2.2.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0061...

SUSE-SU-2021:1408-1 Security update for librsvg

This update for librsvg fixes the following issues: - librsvg was updated to 2.46.5: Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 bsc1183403...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2021:1310-1)

This update for librsvg fixes the following issues : librsvg was updated to 2.42.9 : - Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 bsc1148293 -the bundled version of the cssparser crate now builds correctly on Rust 1.43...

cobalt-bin (>=0.15.1, <=0.17.5), hyper-static-server (>=0.3.1, <=0.5.1) +7 more potentially affected by unknown CVE via sass-rs (0.2.2)

sass-rs CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sass-rs and may be impacted: - cobalt-bin =0.15.1, =0.3.1, =0.1.0, =0.1.0, =0.1.2, =0.7.0, =0.1.0, =0.1.2, =0.1.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-013...

executors (>=0.9.0, <=0.10.0), metrics (0.9.1) +8 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.3.0 - metricsprinter 0.1.0 Source cves: CVE-2021-45704 Source advisory: OSV:RUSTSEC-2021-0113...

a2d (>=0.1.0, <=0.1.11), aart (>=0.1.0, <=0.1.1) +912 more potentially affected by unknown CVE via rusttype (>=0.1.2, <=0.9.3)

rusttype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.2.0, =0.0.10, =0.9.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0140...