Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-36442Highbeef: Data races in beef CVE-2020-36441Highabox: Data race in abox CVE-2020-36443Criticallibp2p-deflate: Use of Uninitialized Resource in libp2p-deflate CVE-2020-36440Highlibsbc: Data races in libsbc CVE-2020-36439Highticketed_lock: Data races in ticketed_lock CVE-2020-36438Hightiny_future: Data race in tiny_future CVE-2020-36437Highconqueue: Data race in conqueue CVE-2019-15547Highncurses: Mishandling of format strings in ncurses CVE-2019-15548Criticalncurses: Buffer overflow and format vulnerabilities in ncurses CVE-2019-15546Highpancurses: Format string vulnerabilities in pancurses CVE-2019-16144Highgenerator: Uninitialized memory use in generator CVE-2021-38511Hightar: Links in archive can create arbitrary directories CVE-2021-38512Highactix-http: HTTP Request Smuggling in actix-http CVE-2020-36435Highruspiro-singleton: Data race in ruspiro-singleton CVE-2020-36436Highunicycle: Data races in unicycle CVE-2020-36434Criticalsys-info: Double free in sys-info CVE-2020-36433Highchunky: Unaligned memory allocation in chunky CVE-2020-36462Highsyncpool: Data race in syncpool CVE-2020-36458Highlexer: Data races in lexer CVE-2020-36463Highmultiqueue: Data races in multiqueue CVE-2020-36459Highdces: Data races in dces CVE-2020-36456Hightoolshed: Data races in toolshed CVE-2020-36455Highslock: Data races in slock CVE-2020-36457Highlever: Data races in lever CVE-2020-36454Highparc: Data races in parc

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo