Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-51502Mediumloona-hpack: loona-hpack Panic Vulnerability GHSA-F77Q-R5QM-W4M8Mediumsp1-recursion-gnark-ffi: sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic CVE-2024-9979Mediumpyo3: PyO3 has a risk of use-after-free in `borrowed` reads from Python weak references CVE-2024-47813Lowwasmtime: Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations CVE-2024-47763Mediumwasmtime: wasmtime has a runtime crash when combining tail calls with trapping imports GHSA-PFR9-2P92-QRHQMediumdbn: Databento Binary Encoding (DBN) has a heap buffer overflow using c_chars_to_str function GHSA-9722-9J67-VJCRHighsurrealdb: Improper Authorization in Select Permissions GHSA-QJRV-V6QP-X99XHighsurrealdb: SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings CVE-2024-47614Highasync-graphql: async-graphql Directive Overload CVE-2024-47609Mediumtonic: Tonic has remotely exploitable denial of service vulnerability CVE-2024-46488Highsqlite-vec: Heap-based Buffer Overflow in sqlite-vec GHSA-2WQ5-G96F-MV3VMediumouch: Ouch! allows a segmentation fault due to use of uninitialized memory GHSA-2326-PFPJ-VX3HLowlexical-core: lexical-core has multiple soundness issues GHSA-64F8-PJGR-9WMRHighsurrealdb: Untrusted Query Object Evaluation in RPC API CVE-2024-45405Mediumgix-path: gix-path improperly resolves configuration path reported by Git CVE-2024-7884Highic_cdk: ic-cdk has a memory leak when calling a canister method via `ic_cdk::call`CVE-2024-8418Highaardvark-dns: Missing connection timeout in Aardvark-dns GHSA-P2Q9-36VW-C468Higholm-sys: olm-sys: wrapped library unmaintained, potentially vulnerable CVE-2024-45311Highquinn-proto: Denial of service in quinn-proto when using `Endpoint::retry()`CVE-2024-45305Lowgix-path: gix-path uses local config across repos when it is the highest scope CVE-2024-45389Mediumpagefind: DOM clobbering could escalate to Cross-site Scripting (XSS)GHSA-75QH-GG76-P2W4Mediumcosmwasm-vm: CWA-2023-004: Excessive number of function parameters in compiled Wasm CVE-2024-43783Highapollo-router: Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies CVE-2024-43414Highapollo-router: Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries GHSA-WQ9X-QWCQ-MMGFHighdiesel: Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.