Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2023-45812Highapollo-router: Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions CVE-2024-43806Mediumrustix: rustix's `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion CVE-2023-53158Mediumgix-transport: gix-transport code execution vulnerability CVE-2023-42811Mediumaes-gcm: AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure CVE-2023-42805Highquinn-proto: Denial of Service issue in quinn-proto CVE-2023-42444Highphonenumber: phonenumber panics on parsing crafted RFC3966 inputs CVE-2023-42447Highblurhash: blurhash panics on parsing crafted inputs CVE-2023-42454Criticalsqlpage: SQLpage vulnerable to public exposure of database credentials CVE-2023-42456Lowsudo-rs: sudo-rs Session File Relative Path Traversal vulnerability CVE-2023-43669Hightungstenite: Tungstenite allows remote attackers to cause a denial of service CVE-2023-41880Lowwasmtime: Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64 CVE-2023-39916Criticalroutinator: NLnet Labs’ Routinator vulnerable to path traversal CVE-2023-39914Highbcder: BER/CER/DER decoder panics on invalid input CVE-2023-4863Highlibwebp-sys2: libwebp: OOB write in BuildHuffmanTable GHSA-36XM-35QQ-795WMediuminventory: Inventory exposes reference to non-Sync data to an arbitrary thread GHSA-JCR6-4FRQ-9GJJMediumusers: Users vulnerable to unaligned read of `*const *const c_char` pointer GHSA-GHC8-5CGM-5RPFMediuminventory: Inventory fails to prohibit standard library access prior to initialization of Rust standard library runtime CVE-2023-41317Mediumapollo-router: Apollo Router Unnamed "Subscription" operation results in Denial-of-Service GHSA-C2HM-MJXV-89R4Lowlexical: Multiple soundness issues in lexical CVE-2023-41051Lowvm-memory: Default functions in VolatileMemory trait lack bounds checks, potentially leading to out-of-bounds memory accesses GHSA-8QV2-5VQ6-G2G7Highwebpki: webpki: CPU denial of service in certificate path building GHSA-RCX8-48PC-V9Q8Mediummail-internals: mail-internals use-after-free vulnerability in `vec_insert_bytes`GHSA-37XQ-Q42P-RV3PLowntpd: ntpd has Dependency on Vulnerable Third-Party Component CVE-2023-40030Lowcargo: Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports GHSA-FH2R-99Q2-6MMGHighrustls-webpki: rustls-webpki: CPU denial of service in certificate path building

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.