Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-20399Mediumlibsecp256k1-rs: Observable Discrepancy in libsecp256k1-rsGHSA-82HM-VH7G-HRH9Mediummolecule: Partial read is incorrect in moleculeGHSA-48VQ-8JQV-GM6FHighckb: Remote memory exhaustion in ckbGHSA-V666-6W97-PCWMHighckb: Miner fails to get block template when a cell used as a cell dep has been destroyed.GHSA-45P7-C959-RGCMCriticalckb: Process crashes when the cell used as DepGroup is not aliveCVE-2021-32810Criticalcrossbeam-deque: crossbeam-deque Data Race before v0.7.4 and v0.8.1CVE-2020-15254Highcrossbeam-channel: crossbeam-channel Undefined Behavior before v0.4.4CVE-2020-35900Mediumarray-queue: use-after-free vulnerability in Rust array-queueCVE-2017-1000168Mediumsodiumoxide: scalarmult() vulnerable to degenerate public keysGHSA-PFJQ-935C-4895Highv9: Data races in v9GHSA-M296-J53X-XV95Hightiny_future: Data races in tiny_futureGHSA-66P5-J55P-32R9Mediumsmallvec: smallvec creates uninitialized value of any typeGHSA-83R8-P8V6-6GFMHighslock: Slock<T> allows sending non-Send types across thread boundariesGHSA-39VW-QP34-RMWFMediumserde_yaml: Uncontrolled recursion leads to abort in deserializationGHSA-8892-84WF-CG8FHighsignal-simple: SyncChannel<T> can move 'T: !Send' to other threadsGHSA-MCRF-7HF9-F6Q5Mediumrmpv: Unchecked vector pre-allocationGHSA-XWXC-J97J-84GFHighparc: Race condition in ParcGHSA-R6FF-2Q3C-V3PVMediumpnet: Compiler optimisation leads to SEGFAULTGHSA-JF43-3V8J-QWWRHighmultiqueue: Data races in multiqueueCVE-2020-36472Mediummax7301: Data races in max7301CVE-2020-36432Criticalalg_ds: Use of Uninitialized Resource in alg_dsCVE-2020-36450Highbunch: Data races in bunchCVE-2020-36445Highconvec: Data races in convecCVE-2020-36446Highsignal-simple: Data races in signal-simpleCVE-2020-36444Highasync-coap: Data races in async-coap

Stop the waste.
Protect your environment with Kodem.