Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-25904Highav-data: Null pointer deference in av-data CVE-2021-25905Criticalbra: Out of bounds read in bra CVE-2021-25906Highbasic_dsp_matrix: Double free in basic_dsp_matrix CVE-2021-26953Highpostscript: Read on uninitialized buffer in postscript CVE-2021-23841Mediumopenssl-src: Integer Overflow in openssl-src CVE-2021-23840Highopenssl-src: Integer Overflow in openssl-src CVE-2021-27378Criticalrand_core: Incorrect check on buffer length in rand_core CVE-2021-27376Criticalnb-connect: nb-connect invalidly assumes the memory layout of std::net::SocketAddr CVE-2021-27671Mediumcomrak: Cross site scripting in comrak CVE-2021-28037Criticalinternment: Data race in internment CVE-2021-28036Highquinn: quinn invalidly assumes the memory layout of std::net::SocketAddr CVE-2021-28033Criticalbyte_struct: Deserializing an array can free uninitialized memory in byte_struct CVE-2021-28032Criticalnano_arena: Use after free in nano_arena CVE-2021-28030Hightruetype: Use of Uninitialized Resource in truetype CVE-2020-36220Mediumva-ts: Data race in va-ts CVE-2020-36214Mediummultiqueue2: Data races in multiqueue2 CVE-2020-36215Highhashconsing: Data races in hashconsing CVE-2020-36216Mediumeventio: Data race in eventio CVE-2020-36217Mediummay_queue: Data race in may_queue CVE-2020-36218Mediumbuttplug: Improper synchronization in buttplug CVE-2020-36219Mediumatomic-option: Data race in atomic-option CVE-2020-36203Mediumreffers: Data races in reffers CVE-2020-36204Mediumim: Data races in im CVE-2020-36205Mediumxcb: Memory handling issues in xcb CVE-2020-36206Highrusb: Data races in rusb

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo