Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-M325-RXJV-PWPHHighmessagepack-rs: Deserialization functions pass uninitialized memory to user-provided ReadGHSA-QQMC-HWQP-8G2WHighlru: Use after free in lru crateGHSA-WC36-XGCC-JWPRHighlibp2p-core: Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`GHSA-F67M-9J94-QV9JHighhyper: Parser creates invalid uninitialized valueGHSA-28P5-7RG4-8V99Highgfx-auxil: Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )GHSA-P56P-GQ3F-WHG8Highflumedb: `Read` on uninitialized buffer may cause UB ( `read_entry()` )GHSA-3JCH-9QGP-4844Criticalflatbuffers: Generated code can read and write out of bounds in safe codeGHSA-RXHX-9FJ6-6H2MHighenum-map: enum_map macro can cause UB when `Enum` trait is incorrectly implementedGHSA-9RG7-3J4F-CF4XMediumderive-com-impl: QueryInterface should call AddRef before returning pointerGHSA-MPG5-FVWP-42M2Highdashmap: Unsoundness in `dashmap` referencesGHSA-R67P-M7G9-GXW6Highcsv-sniffer: `Read` on uninitialized memory may cause UB (fn preamble_skipcount())GHSA-PMCV-MGCF-RVXGHighcrypto2: Non-aligned u32 read in Chacha20 encryption and decryptionGHSA-8GJ8-HV75-GP94Mediumcrossbeam: `SegQueue` creates zero value of any typeGHSA-6888-WF7J-34JQMediumcrossbeam-queue: `SegQueue` creates zero value of any typeGHSA-9G55-PG62-M8HHHighcrossbeam-channel: Channel creates zero value of any typeGHSA-CXCC-Q839-2CW9Highcolumnar: columnar: `Read` on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())GHSA-HMX9-JM3V-33HVHighbuffoon: InputStream::read_exact : `Read` on uninitialized buffer causes UBGHSA-5PHC-849H-VCXGHighbronzedb-protocol: `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`)GHSA-72R2-RG28-47V9Highbite: `read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)GHSA-C6PX-4GRW-HRJRHighbinjs_io: 'Read' on uninitialized memory may cause UBGHSA-5J8W-R7G8-5472Higharrow2: Arrow2 allows double free in `safe` codeGHSA-QGRP-8F3V-Q85PHigharrow: `FixedSizeBinaryArray` does not perform bound checks on accessing values and offsetsGHSA-H588-76VG-PRGJHigharrow: `DecimalArray` does not perform bound checks on accessing values and offsetsGHSA-QJ69-C89V-JWQ2Highash: Reading on uninitialized memory may cause UB ( `util::read_spv()` )GHSA-R7CJ-WMWV-HFW5Higharrow: `BinaryArray` does not perform bound checks on reading values and offsets

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo