Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-29787Highzip: zip Incorrectly Canonicalizes Paths during Archive Extraction Leading to Arbitrary File Write CVE-2025-27512Lowzincati: Zincati allows unprivileged access to rpm-ostree D-Bus `Deploy()` and `FinalizeDeployment()` methods CVE-2025-30089Mediumgurk: gurk (aka gurk-rs) mishandles ANSI escape sequences CVE-2025-27591Highbelow: Below has Incorrect Permission Assignment for Critical Resource GHSA-FMWF-C46W-R8QMMediumqcp: qcp has possible crash/DOS in some build configurations CVE-2025-53605Mediumprotobuf: Crash due to uncontrolled recursion in protobuf crate CVE-2025-4432Mediumring: Some AES functions may panic when overflow checking is enabled in ring CVE-2025-27498Mediumascon_aead: AEADs/ascon-aead: Plaintext exposed in decrypt_in_place_detached even on tag verification failure GHSA-V83Q-83HJ-RW38Mediumntpd: ntpd NTS client denial of service via wrongly sized cookies GHSA-5PMW-9J92-3C4CHighopenh264-sys2: OpenH264 Rust API Openh264 Decoding Functions Heap Overflow Vulnerability GHSA-F8QM-HMM3-FV7FCriticalnamada-apps: Namada-apps allows Excessive Computation in Mempool Validation GHSA-82VG-5V4F-F9WQCriticalnamada-apps: Namada-apps can Crash with Excessive Computation in Mempool Validation GHSA-2GW2-QGJG-XH6PCriticalnamada-apps: Namada-apps allows Post-Genesis Validator Bypass GHSA-H7H7-6MX3-R89VLowfyrox-core: Fyrox has unsound usages of `Vec::from_raw_parts` GHSA-5V93-9MQW-P9MHHighorml-rewards: Uncaught Panic in ORML Rewards Pallet GHSA-V7PC-74H8-XQ2HMediumhickory-proto: Hickory DNS failure to verify self-signed RRSIG for DNSKEYs CVE-2025-25194Mediumactivitypub_federation: Server-Side Request Forgery (SSRF) in activitypub_federation GHSA-QM2P-4W45-V2VRMediumgrcov: grcov has an out of bounds write triggered by crafted coverage data CVE-2025-25188Mediumhickory-proto: Hickory DNS's DNSSEC validation may accept broken authentication chains GHSA-MX2J-7CMV-353CMediumcosmwasm-vm: wasmvm: Malicious smart contract can slow down block production CVE-2025-24898Mediumopenssl: rust-openssl ssl::select_next_proto use after free CVE-2025-24802Highplonky2: Soundness issue with Plonky2 look up tables GHSA-8655-XGH5-5VVQMediumfast-float: fast-fault has a segmentation fault due to lack of bound check GHSA-JQCP-XC3V-F446Mediumfast-float2: fast-float2 has a segmentation fault due to lack of bound check CVE-2025-24800Criticalismp-grandpa: ismp-grandpa crate accepted incorrect signatures

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.