Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-29940Criticalthrough: Double free in through CVE-2021-29942Highreorder: Out of bounds write in reorder CVE-2021-29941Highreorder: Out of bounds write in reorder CVE-2021-29929Highendian_trait: Double free in endian_trait CVE-2021-29932Highparse_duration: Uncontrolled Resource Consumption in parse_duration CVE-2021-3449Mediumopenssl-src: openssl-src NULL pointer Dereference in signature_algorithms processing CVE-2021-3450Highopenssl-src: Certificate check bypass in openssl-src CVE-2021-28308Criticalfltk: Out of bounds read in fltk CVE-2021-28306Highfltk: Null pointer deference in fltk CVE-2021-28307Highfltk: Null pointer deference in fltk CVE-2021-26956Criticalxcb: Arbitrary return types in xcb CVE-2021-26951Criticalcalamine: Out of bounds write in calamine CVE-2021-26955Criticalxcb: Unchecked Return Value in xcb CVE-2021-26957Criticalxcb: Out of bounds read in xcb CVE-2021-26958Highxcb: Unchecked Return Value in xcb CVE-2021-26952Highms3d: Use of Uninitialized Resource in ms3d CVE-2021-26308Highmarc: Uninitialized buffer use in marc CVE-2021-26305Criticalcdr: Read of uninitialized memory in cdr CVE-2021-26306Highraw-cpuid: Soundness issue in raw-cpuid CVE-2021-26307Mediumraw-cpuid: Error on unsupported architectures in raw-cpuid CVE-2021-25907Criticalcontainers: Double free in containers CVE-2021-25908Highfil-ocl: Double free in fil-ocl CVE-2021-25902Highglsl-layout: Double free in glsl-layout CVE-2021-25901Mediumlazy-init: Out of bounds read in lazy-init CVE-2021-25903Highcache: Null pointer deference in cache

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo