Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-38194Criticalark-r1cs-std: Calculation error in ark-r1cs-std CVE-2021-38193Mediumammonia: Cross-site Scripting in ammonia CVE-2021-38192Highprost-types: Overflow in prost-types CVE-2021-38191Mediumtokio: Race condition in tokio CVE-2021-38190Criticalnalgebra: Out of bounds write in nalgebra CVE-2021-38188Criticaliced-x86: Incorrect buffer size calculation in iced-x86 CVE-2021-38187Criticalanymap: Incorrect cast in anymap CVE-2021-38186Mediumcomrak: Cross-site Scripting in comrak GHSA-773Q-5334-5GF9Mediumevm-core: Memory over-allocation in evm-core GHSA-8XW8-MMQV-FRQQHighfake-static: fake-static allows converting any reference into a `'static` reference CVE-2021-27377Criticalyottadb: Use-after-free in yottadb CVE-2017-1000430Criticalbase64: Integer overflow in base64 CVE-2021-30454Criticalouter_cgi: Uninitialized memory access in outer_cgi CVE-2021-30456Criticalid-map: Double-free in id-map CVE-2021-30457Criticalid-map: Double-free in id-map CVE-2021-30455Criticalid-map: Double-free in id-map CVE-2021-29930Higharenavec: Out of bounds write in arenavec CVE-2021-29933Highinsert_many: Double free in insert_many CVE-2021-29931Higharenavec: Double free in arenavec CVE-2021-29934Highuu_od: Out of bounds read in uu_od CVE-2021-29937Criticaltelemetry: Free of uninitialized memory in telemetry CVE-2021-29935Highrocket: Use after free in Rocket CVE-2021-29936Criticaladtensor: Free of uninitialized memory in adtensor CVE-2021-29938Highslice-deque: Double free in slice-deque CVE-2021-29939Highstackvector: Out of bounds write in stackvector

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo