Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-35222Mediumtauri: iFrames Bypass Origin Checks for Tauri API Access Control CVE-2024-35197Mediumgix-worktree-state: gix refs and paths with reserved Windows device names access the devices CVE-2024-35186Highgix-worktree-state: gix traversal outside working tree enables arbitrary code execution CVE-2024-4435Mediumic-stable-structures: ic-stable-structures vulnerable to BTreeMap memory leak when deallocating nodes with overflows CVE-2024-35313Mediumtor-circmgr: Tor path lengths too short when "full Vanguards" configured CVE-2024-35312Higharti: Tor Arti's STUB circuits incorrectly have a length of 2 CVE-2024-34353Mediummatrix-sdk-crypto: matrix-sdk-crypto contains a log exposure of private key of the server-side key backup CVE-2024-32980Criticalspin-sdk: Spin applications with specific configuration vulnerable to potential network sandbox escape CVE-2024-34346Highdeno: Deno permission escalation vulnerability via open of privileged files with missing `--deny` flag CVE-2024-34063Lowvodozemac: vodozemac has degraded secret zeroization capabilities CVE-2024-32971Criticalapollo-router: Apollo Router vulnerable to Critical Regression In Query Plan Cache CVE-2024-32984Highyamux: Yamux Memory Exhaustion Vulnerability via Active::pending_frames property CVE-2024-32966Mediumstatic-web-server: static-web-server vulnerable to stored Cross-site Scripting in directory listings via file names CVE-2024-58263Lowcosmwasm-std: CosmWasm affected by arithmetic overflows CVE-2024-32650Highrustls: Denial of Service Vulnerability in Rustls Library CVE-2024-32884Mediumgix-transport: gix-transport indirect code execution via malicious username GHSA-MC39-H54G-PVW6Mediumlibdav1d-sys: libdav1d-sys affected by dav1d AV1 decoder integer overflow CVE-2023-53156Mediumtranspose: transpose: Buffer overflow due to integer overflow GHSA-XFHW-6MC4-MGXFHighcrayon: crayon: ObjectPool creates uninitialized memory when freeing objects GHSA-W5W5-8VFH-XCJQHighwhoami: whoami stack buffer overflow on several Unix platforms GHSA-4V52-7Q2X-V4XJHigheyre: eyre: Parts of Report are dropped as the wrong type during downcast GHSA-W7HM-HMXV-PVHFHighhpack: HPACK decoder panics on invalid input GHSA-Q6CP-QFWQ-4GCVMediumh2: h2 servers vulnerable to degradation of service with CONTINUATION Flood CVE-2024-27284Highcassandra-cpp: cassandra-rs's non-idiomatic use of iterators leads to use after free CVE-2024-30266Lowwasmtime: Wasmtime vulnerable to panic when using a dropped extenref-typed element segment

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.