Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-21629Mediumevm: Rust EVM erroneousle handles `record_external_operation` error return GHSA-P4V8-JGCV-9G75Highsafe_pqc_kyber: safe_pqc_kyber leaks parts of secret keys CVE-2023-50711Mediumvmm-sys-util: `serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access CVE-2023-53157Mediumrosenpass: Remotely exploitable denial of service in Rosenpass GHSA-R24F-HG58-VFRWMediumunsafe-libyaml: unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms CVE-2023-48795Mediumrussh: Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin GHSA-RJHF-4MH8-9XJQMediumzerocopy: Zerocopy: Some Ref methods are unsound with some type parameters GHSA-3MV5-343C-W2QGLowzerocopy: Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut CVE-2023-54366Highsurrealdb: SurrealDB: Full Table Permissions by Default CVE-2023-6193Mediumquiche: Unbounded queuing of path validation messages in cloudflare-quiche CVE-2023-51661Highwasmer-cli: Wasmer filesystem sandbox not enforced CVE-2023-6245Highcandid: Candid infinite decoding loop through specially crafted payload CVE-2023-26154Mediumpubnub: pubnub Insufficient Entropy vulnerability CVE-2023-6180Mediumtokio-boring: tokio-boring vulnerable to resource exhaustion via memory leak GHSA-WJ7F-468M-6MV8Mediumbirdcage: Environment variables still accessible through /proc CVE-2023-49092Mediumrsa: Marvin Attack: potential key recovery through timing sidechannels GHSA-4GRX-2X9W-596CMediumrsa: Marvin Attack: potential key recovery through timing sidechannels GHSA-XPHF-CX8H-7Q9GMediumopenssl: `openssl` `X509StoreRef::objects` is unsound GHSA-48M6-WM5P-RR6HHighself_cell: Insufficient covariance check makes self_cell unsound GHSA-475V-PQ2G-FP9GLows2n-quic: s2n-quic potential denial of service via crafted stream frames GHSA-J57R-4QW6-58R3Lowrusty-paseto: rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency CVE-2023-46135Mediumstellar-strkey: stellar-strkey vulnerable to panic in SignedPayload::from_payload CVE-2024-21530Mediumcocoon: Sequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse CVE-2023-46115Hightauri-cli: Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables CVE-2023-46277Highpleaser: Pleaser privilege escalation vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.