Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-15254Highcrossbeam-channel: crossbeam-channel Undefined Behavior before v0.4.4CVE-2020-35900Mediumarray-queue: use-after-free vulnerability in Rust array-queueCVE-2017-1000168Mediumsodiumoxide: scalarmult() vulnerable to degenerate public keysGHSA-PFJQ-935C-4895Highv9: Data races in v9GHSA-M296-J53X-XV95Hightiny_future: Data races in tiny_futureGHSA-66P5-J55P-32R9Mediumsmallvec: smallvec creates uninitialized value of any typeGHSA-83R8-P8V6-6GFMHighslock: Slock<T> allows sending non-Send types across thread boundariesGHSA-39VW-QP34-RMWFMediumserde_yaml: Uncontrolled recursion leads to abort in deserializationGHSA-8892-84WF-CG8FHighsignal-simple: SyncChannel<T> can move 'T: !Send' to other threadsGHSA-MCRF-7HF9-F6Q5Mediumrmpv: Unchecked vector pre-allocationGHSA-XWXC-J97J-84GFHighparc: Race condition in ParcGHSA-R6FF-2Q3C-V3PVMediumpnet: Compiler optimisation leads to SEGFAULTGHSA-JF43-3V8J-QWWRHighmultiqueue: Data races in multiqueueCVE-2020-36472Mediummax7301: Data races in max7301CVE-2020-36432Criticalalg_ds: Use of Uninitialized Resource in alg_dsCVE-2020-36450Highbunch: Data races in bunchCVE-2020-36445Highconvec: Data races in convecCVE-2020-36446Highsignal-simple: Data races in signal-simpleCVE-2020-36444Highasync-coap: Data races in async-coapCVE-2020-36442Highbeef: Data races in beefCVE-2020-36441Highabox: Data race in aboxCVE-2020-36443Criticallibp2p-deflate: Use of Uninitialized Resource in libp2p-deflateCVE-2020-36440Highlibsbc: Data races in libsbcCVE-2020-36439Highticketed_lock: Data races in ticketed_lockCVE-2020-36438Hightiny_future: Data race in tiny_future

Stop the waste.
Protect your environment with Kodem.