Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-29640Highaliyundrive-webdav: aliyundrive-webdav vulnerable to Command Injection CVE-2024-28854Hightls-listener: tls-listener affected by the slow loris vulnerability with default configuration CVE-2024-1765Mediumquiche: quiche vulnerable to unlimited resource allocation by QUIC CRYPTO frames flooding CVE-2024-1410Lowquiche: quiche vulnerable to unbounded storage of information related to connection ID retirement CVE-2024-28123Highwasmi: Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters CVE-2024-28101Highapollo-router: Apollo Router's Compressed Payloads do not respect HTTP Payload Limits CVE-2024-27934HighDeno: *const c_void / ExternalPointer unsoundness leading to use-after-free CVE-2024-27933Highdeno: Deno arbitrary file descriptor close via `op_node_ipc_pipe()` leading to permission prompt bypass CVE-2024-27932Mediumdeno: Deno's improper suffix match testing for DENO_AUTH_TOKENS CVE-2024-27936Highdeno: Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping CVE-2024-27935Highdeno: Deno's Node.js Compatibility Runtime has Cross-Session Data Contamination CVE-2024-27931Mediumdeno: Insufficient permission checking in `Deno.makeTemp*` APIs CVE-2024-27308Highmio: Mio's tokens for named pipes may be delivered after deregistration GHSA-Q3GG-M8HR-H4X4Highsurrealdb: Externally Controlled Format String in Scripting Functions GHSA-6WR5-JMPR-MJCXMediumsurrealdb: Uncaught Exception in Macro Expecting Native Function to Exist GHSA-8XFF-473H-F863Mediumsurrealdb: Uncaught Exception Handling Parsing Errors on Line Terminators CVE-2024-21491Mediumsvix: svix vulnerable to Authentication Bypass GHSA-22Q8-GHMQ-63VFHighlibgit2-sys: libgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2 GHSA-X5J2-G63M-F8G4Highpqc_kyber: pqc_kyber KyberSlash: division timings depending on secrets CVE-2024-58264Highserde-json-wasm: serde-json-wasm stack overflow during recursive JSON parsing CVE-2024-25817Higheza: eza Potential Heap Overflow Vulnerability for AArch64 GHSA-29C2-65RJ-H343Mediumckb: Nervos CKB Permit load cell data from memory GHSA-H4C3-5275-VRMGMediumckb: Nervos CKB Pool does not remove the conflicting transactions from the statistics CVE-2018-25001Mediumlibpulse-binding: Use after free in libpulse-binding GHSA-Q73F-W3H7-7WCCCriticalckb: Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.