hina (>=0.0.1, <=0.1.3) potentially affected by CVE-2020-36511 via bite (0.0.5)

bite CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on bite and may be impacted: - hina =0.0.1, =0.1.3 Source cves: CVE-2020-36511 Source advisory: OSV:RUSTSEC-2020-0153...

app (>=0.2.0, <=0.6.5), bench_timer (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via stderr (>=0.2.2, <=0.8.0)

stderr CARGO version =0.2.2, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0109...

ahrightos-kernel (0.1.0), bootloader (>=0.10.0-alpha-01, <=0.10.13) +2 more potentially affected by CVE-2020-36208 via conquer-once (0.2.1)

conquer-once CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on conquer-once and may be impacted: - ahrightos-kernel 0.1.0 - bootloader =0.10.0-alpha-01, =0.14.0, =0.1.0, =0.2.6 Source cves: CVE-2020-36208 Source advisory:...

timeout_io (>=0.2.0, <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (0.3.2)

tinyfuture CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:RUSTSEC-2020-0118...

safe_dns (0.3.0), safe_launcher (0.1.0) +1 more potentially affected by unknown CVE via safe_core (0.3.0)

safecore CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on safecore and may be impacted: - safedns 0.3.0 - safelauncher 0.1.0 - safenfs 0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0086...

alkyne (0.1.0), dioxus-core (0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0, <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

kanidm (>=0.1.0, <=0.1.1), kanidm_client (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-35928 via concread (0.1.20)

concread CARGO version 0.1.20 is affected by a known vulnerability. The following packages have a transitive dependency on concread and may be impacted: - kanidm =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2020-35928 Source advisory: OSV:RUSTSEC-2020-0092...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +58 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:RUSTSEC-2020-0068...

abrute (>=0.1.7, <=0.1.8), aderyn_core (>=0.0.7, <=0.0.9) +775 more potentially affected by unknown CVE via term_size (>=0.1.1, <=1.0.0-beta.2)

termsize CARGO version =0.1.1, =0.1.7, =0.0.7, =0.0.8, =0.1.0, =0.0.2, =1.0.1, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.2.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0163...

maidsafe_client (>=0.1.0, <=0.1.2), maidsafe_types (>=0.0.9, <=0.2.3) +8 more potentially affected by unknown CVE via routing (>=0.0.9, <=0.4.1)

routing CARGO version =0.0.9, =0.1.0, =0.0.9, =0.0.3, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0076...

RUSTSEC-2020-0055 Please see RUSTSEC-2018-0020

This vulnerability was misfiled under the wrong year and has been withdrawn...

Please see RUSTSEC-2018-0020

This vulnerability was misfiled under the wrong year and has been withdrawn...

RUSTSEC-2020-0051 Obsolete versions of the `rustsec` crate do not support the new V3 advisory format

If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...

Obsolete versions of the `rustsec` crate do not support the new V3 advisory format

If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...

cargo-audit (>=0.3.0, <=0.4.0) potentially affected by unknown CVE via rustsec (>=0.7.5, <=0.8.0)

rustsec CARGO version =0.7.5, =0.3.0, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0051...

mozjpeg DecompressScanlines::read_scanlines is Unsound

This issue and vector is similar to RUSTSEC-2020-0029 of rgb crate which mozjpeg depends on. Affected versions of mozjpeg crate allow creating instances of any type T from bytes, and do not correctly constrain T to the types for which it is safe to do so. Examples of safety violation possible for...

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +55 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0167...

acari-lib (>=0.1.1, <=0.1.8), accepted (>=0.2.0, <=0.3.2) +1861 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi 5.1.2 - aigcchain 5.1.2 - aigcconfig 5.1.2 and more Source cves: CVE-2020-35881 Source advisory: OSV:RUSTSEC-2020-0027...

bat (0.18.0), buffett-core (>=0.1.0, <=0.1.1) +74 more potentially affected by CVE-2020-36434 via sys-info (>=0.4.1, <=0.7.0)

sys-info CARGO version =0.4.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.3.0, =0.29.0, =0.20.0, =0.1.0, =0.1.0, =1.3.0, =1.8.0, =0.7.0, =0.7.0, =0.31.2 and more Source cves: CVE-2020-36434 Source advisory: OSV:RUSTSEC-2020-0100...

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), azure_sdk_auth_aad (>=0.30.0, <=0.35.0) +19 more potentially affected by CVE-2020-35875 via tokio-rustls (>=0.12.0-alpha.1, <=0.12.0-alpha.8)

tokio-rustls CARGO version =0.12.0-alpha.1, =0.5.0-alpha.6, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.1.0-alpha.1, =0.1.0, =0.30.0, =3.2.2, =3.4.2 and more Source cves: CVE-2020-35875 Source advisory: OSV:RUSTSEC-2020-0019...