Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-36437Highconqueue: Data race in conqueue CVE-2019-15547Highncurses: Mishandling of format strings in ncurses CVE-2019-15548Criticalncurses: Buffer overflow and format vulnerabilities in ncurses CVE-2019-15546Highpancurses: Format string vulnerabilities in pancurses CVE-2019-16144Highgenerator: Uninitialized memory use in generator CVE-2021-38511Hightar: Links in archive can create arbitrary directories CVE-2021-38512Highactix-http: HTTP Request Smuggling in actix-http CVE-2020-36435Highruspiro-singleton: Data race in ruspiro-singleton CVE-2020-36436Highunicycle: Data races in unicycle CVE-2020-36434Criticalsys-info: Double free in sys-info CVE-2020-36433Highchunky: Unaligned memory allocation in chunky CVE-2020-36462Highsyncpool: Data race in syncpool CVE-2020-36458Highlexer: Data races in lexer CVE-2020-36463Highmultiqueue: Data races in multiqueue CVE-2020-36459Highdces: Data races in dces CVE-2020-36456Hightoolshed: Data races in toolshed CVE-2020-36455Highslock: Data races in slock CVE-2020-36457Highlever: Data races in lever CVE-2020-36454Highparc: Data races in parc CVE-2020-36452Criticalarray-tools: Memory corruption in array-tools CVE-2020-36453Highscottqueue: Data races in scottqueue CVE-2020-36451Highrcu_cell: Data races in rcu_cell CVE-2020-36448Highcache: Data races in cache CVE-2020-36449Highkekbit: Command injection in kekbit CVE-2020-36447Highv9: Data race in v9

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo