Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-39216Mediumwasmtime: Use after free passing `externref`s to Wasm in Wasmtime CVE-2021-39228Mediumtremor-script: Memory Safety Issue when using patch or merge on state and assign the result back to state CVE-2021-28035Criticalstack_dst: Drop of uninitialized memory in stack_dst CVE-2021-28034Criticalstack_dst: Double free in stack_dst CVE-2021-28029Hightoodee: Uninitialized memory access in toodee CVE-2021-28028Criticaltoodee: Double free in toodee CVE-2021-39193Mediumpallet-ethereum: Transaction validity oversight in pallet-ethereum CVE-2021-32629Highcranelift-codegen: Memory access due to code generation flaw in Cranelift module CVE-2021-31996Highalgorithmica: Double free in algorithmica CVE-2021-31919Highrkyv: Use of uninitialized buffer in rkyv CVE-2021-31155Highpleaser: Permissions bypass in pleaser CVE-2021-31154Highpleaser: Permissions bypass in pleaser CVE-2021-31153Lowpleaser: File exposure in pleaser CVE-2021-36376Highgit-delta: Relative Path Traversal in git-delta CVE-2021-36753Highbat: Uncontrolled Search Path Element in sharkdp/bat CVE-2020-36212Highabi_stable: Update unsound DrainFilter and RString::retain CVE-2020-36213Highabi_stable: Update unsound DrainFilter and RString::retain CVE-2020-25574Highhttp: Integer Overflow/Infinite Loop in the http crate CVE-2020-13759Highvm-memory: Improper Synchronization and Race Condition in vm-memory CVE-2019-20399Mediumlibsecp256k1-rs: Observable Discrepancy in libsecp256k1-rs GHSA-82HM-VH7G-HRH9Mediummolecule: Partial read is incorrect in molecule GHSA-48VQ-8JQV-GM6FHighckb: Remote memory exhaustion in ckb GHSA-V666-6W97-PCWMHighckb: Miner fails to get block template when a cell used as a cell dep has been destroyed.GHSA-45P7-C959-RGCMCriticalckb: Process crashes when the cell used as DepGroup is not alive CVE-2021-32810Criticalcrossbeam-deque: crossbeam-deque Data Race before v0.7.4 and v0.8.1

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo