Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-475V-PQ2G-FP9GLows2n-quic: s2n-quic potential denial of service via crafted stream frames GHSA-J57R-4QW6-58R3Lowrusty-paseto: rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency CVE-2023-46135Mediumstellar-strkey: stellar-strkey vulnerable to panic in SignedPayload::from_payload CVE-2024-21530Mediumcocoon: Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse CVE-2023-46115Hightauri-cli: Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables CVE-2023-46277Highpleaser: Pleaser privilege escalation vulnerability CVE-2023-45812Highapollo-router: Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions CVE-2024-43806Mediumrustix: rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion CVE-2023-53158Mediumgix-transport: gix-transport code execution vulnerability CVE-2023-42811Mediumaes-gcm: AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure CVE-2023-42805Highquinn-proto: Denial of Service issue in quinn-proto CVE-2023-42444Highphonenumber: phonenumber panics on parsing crafted RFC3966 inputs CVE-2023-42447Highblurhash: blurhash panics on parsing crafted inputs CVE-2023-42454Criticalsqlpage: SQLpage vulnerable to public exposure of database credentials CVE-2023-42456Lowsudo-rs: sudo-rs Session File Relative Path Traversal vulnerability CVE-2023-43669Hightungstenite: Tungstenite allows remote attackers to cause a denial of service CVE-2023-41880Lowwasmtime: Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 CVE-2023-39916Criticalroutinator: NLnet Labs’ Routinator vulnerable to path traversal CVE-2023-39914Highbcder: BER/CER/DER decoder panics on invalid input CVE-2023-4863Highlibwebp-sys2: libwebp: OOB write in BuildHuffmanTable GHSA-36XM-35QQ-795WMediuminventory: Inventory exposes reference to non-Sync data to an arbitrary thread GHSA-JCR6-4FRQ-9GJJMediumusers: Users vulnerable to unaligned read of `*const *const c_char` pointer GHSA-GHC8-5CGM-5RPFMediuminventory: Inventory fails to prohibit standard library access prior to initialization of Rust standard library runtime CVE-2023-41317Mediumapollo-router: Apollo Router Unnamed "Subscription" operation results in Denial-of-Service GHSA-C2HM-MJXV-89R4Lowlexical: Multiple soundness issues in lexical

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.