Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-7V4J-8WVR-V55RMediumarray-macro: `array!` macro is unsound when its length is impure constant GHSA-83GG-PWXF-JR89Mediumarray-macro: `array!` macro is unsound in presence of traits that implement methods it calls internally GHSA-P2G9-94WH-65C2Mediumammonia: Space bug in `clean_text`GHSA-HV9V-7W3V-RJ6FHighacc_reader: `Read` on uninitialized buffer in `fill_buf()` and `read_up_to()`GHSA-HFXP-P695-629XHighabomonation: abomonation transmutes &T to and from &[u8] without sufficient constraints GHSA-GFG9-X6PX-R7GRMediumplutonium: Library exclusively intended to obfuscate code.CVE-2020-25575Criticalfailure: Type confusion if __private_get_type_id__ is overriden CVE-2021-41641Highdeno: Link Following in Deno GHSA-RWF4-GX62-RQFWMediumcrossbeam: `MsQueue` `push`/`pop` use the wrong orderings CVE-2022-29185Mediumtotp-rs: Observable Timing Discrepancy in totp-rs CVE-2021-43172Highroutinator: Routinator infinite loop vulnerability CVE-2021-3711Criticalopenssl-src: SM2 Decryption Buffer Overflow CVE-2021-3712Highopenssl-src: Read buffer overruns processing ASN.1 strings CVE-2021-20332Mediummongodb: Exposure of Sensitive Information to an Unauthorized Actor in MongoDB Rust Driver CVE-2021-28305Criticaldiesel: Fix a use-after-free bug in diesels Sqlite backend CVE-2021-28031Criticalscratchpad: move_elements can double-free objects on panic CVE-2021-28027Criticalbam: Loading a bgzip block can write out of bounds if size overflows.CVE-2021-26954Mediumqwutils: insert_slice_clone can double drop if Clone panics.CVE-2021-25900Criticalsmallvec: Buffer overflow in SmallVec::insert_many CVE-2020-36202Mediumasync-h1: Async-h1 request smuggling possible with long unread bodies CVE-2020-35906Highfutures-task: futures_task::waker may cause a use-after-free if used on a type that isn't 'static CVE-2020-35908Mediumfutures-util: Improper `Sync` implementation on `FuturesUnordered` in futures-utils can cause data corruption CVE-2020-35919Mediumnet2: `net2` invalidly assumes the memory layout of std::net::SocketAddr CVE-2020-35907Mediumfutures-task: futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer CVE-2020-35905Mediumfutures-util: MutexGuard::map can cause a data race in safe code

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.