Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-58264Highserde-json-wasm: serde-json-wasm stack overflow during recursive JSON parsing CVE-2024-25817Higheza: eza Potential Heap Overflow Vulnerability for AArch64 GHSA-29C2-65RJ-H343Mediumckb: Nervos CKB Permit load cell data from memory GHSA-H4C3-5275-VRMGMediumckb: Nervos CKB Pool does not remove the conflicting transactions from the statistics CVE-2018-25001Mediumlibpulse-binding: Use after free in libpulse-binding GHSA-Q73F-W3H7-7WCCCriticalckb: Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result GHSA-3GJH-29FV-8HR6Highckb: Nervos CKB Snappy decompress length can be very large and causes out of memory error GHSA-WJXC-PJX9-4WVMHighckb: Nervos CKB Panic on malformed input GHSA-HJQQ-29PW-96WJHighckb: Nervos CKB node panics when processing a block which parent timestamp is too new GHSA-R9RV-9MH8-PXF4Mediumckb: Nervos CKB BlockTimeTooNew should not be considered as invalid block GHSA-PR39-8257-FXC2Lowckb: Nervos CKB DoS: Process exists when p2p discovery protocol receives unsupported peer IP GHSA-84X2-2QV6-QG56Criticalckb: Nervos CKB P2P DoS Attacks GHSA-Q669-2VFG-CXCGMediumckb: Nervos CKB Unaligned Pointer Dereference CVE-2022-39394Lowwasmtime: wasmtime_trap_code C API function has out of bounds write vulnerability CVE-2021-29511Mediumevm: Memory over-allocation in evm crate CVE-2024-23649Highlemmy_server: Any authenticated user may obtain private message details from other users on the same instance CVE-2024-58265Lowsnow: Unauthenticated Nonce Increment in snow CVE-2024-23644Mediumtrillium-http: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client GHSA-C8V3-JHV9-4PPCMediumrust-i18n-support: Use-after-free when setting the locale GHSA-W59H-378F-2FRMMediumthreadalone: Unsound sending of non-Send types across threads in threadalone CVE-2024-58266Lowshlex: Multiple issues involving quote API in shlex GHSA-58J9-J2FJ-V8F4Highsurrealdb: SurrealDB vulnerable to Uncontrolled CPU Consumption via WebSocket Interface GHSA-8R5V-VM4M-4G25Mediumh2: Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)GHSA-6R8P-HPG7-825GMediumsurrealdb: Uncontrolled Recursion in SurrealQL Parsing GHSA-M24X-R6Q3-2VP9Highsurrealdb: Uncaught Exception processing HTTP Headers in SurrealDB

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.