Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-58367Highsurrealdb: SurrealDB: Improper Authorization in Select Permissions GHSA-QJRV-V6QP-X99XHighsurrealdb: SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings CVE-2024-47614Highasync-graphql: async-graphql Directive Overload CVE-2024-47609Mediumtonic: Tonic has remotely exploitable denial of service vulnerability CVE-2024-46488Highsqlite-vec: Heap-based Buffer Overflow in sqlite-vec GHSA-2WQ5-G96F-MV3VMediumouch: Ouch! allows a segmentation fault due to use of uninitialized memory GHSA-2326-PFPJ-VX3HLowlexical-core: lexical-core has multiple soundness issues GHSA-64F8-PJGR-9WMRHighsurrealdb: Untrusted Query Object Evaluation in RPC API CVE-2024-45405Mediumgix-path: gix-path improperly resolves configuration path reported by Git CVE-2024-7884Highic_cdk: ic-cdk has a memory leak when calling a canister method via `ic_cdk::call`CVE-2024-8418Highaardvark-dns: Missing connection timeout in Aardvark-dns GHSA-P2Q9-36VW-C468Higholm-sys: olm-sys: wrapped library unmaintained, potentially vulnerable CVE-2024-45311Highquinn-proto: Denial of service in quinn-proto when using `Endpoint::retry()`CVE-2024-45305Lowgix-path: gix-path uses local config across repos when it is the highest scope CVE-2024-45389Mediumpagefind: DOM clobbering could escalate to Cross-site Scripting (XSS)GHSA-75QH-GG76-P2W4Mediumcosmwasm-vm: CWA-2023-004: Excessive number of function parameters in compiled Wasm CVE-2024-43783Highapollo-router: Apollo Router Coprocessors may cause Denial-of-Service when handling request bodies CVE-2024-43414Highapollo-router: Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries GHSA-WQ9X-QWCQ-MMGFHighdiesel: Diesel vulnerable to Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts CVE-2024-43785Lowgitoxide-core: gitoxide-core does not neutralize special characters for terminals GHSA-XMRP-424F-VFPXMediumsqlx: SQLx Binary Protocol Misinterpretation caused by Truncating or Overflowing Casts CVE-2024-44073Mediumminiscript: Miniscript allows stack consumption GHSA-8327-84CJ-8XJMMediumalloy-json-abi: Stack overflow when parsing specially crafted JSON ABI strings CVE-2024-43410Highrussh: Russh has an OOM Denial of Service due to allocation of untrusted amount CVE-2024-43367Highboa_engine: Boa has an uncaught exception when transitioning the state of `AsyncGenerator` objects

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.