Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-36471Mediumgenerator: Data races in generator CVE-2020-36469Mediumappendix: Data races in appendix CVE-2020-36470Mediumdisrustor: Data race in disrustor CVE-2020-36468Mediumcgc: Non-atomic writes in cgc CVE-2020-15093Hightough: Improper verification of signature threshold in tough GHSA-GHPQ-VJXW-CH5WHighlibpulse-binding: Use after free in libpulse-binding CVE-2020-25576Criticalrand_core: Unaligned memory access in rand_core CVE-2020-28247Mediumlettre: Argument injection in lettre CVE-2020-26235Mediumtime: Segmentation fault in time CVE-2020-26297HighmdBook: XSS in mdBook CVE-2021-21299Mediumhyper: HTTP Request Smuggling in hyper CVE-2020-36467Mediumcgc: Multiple soundness issues in cgc CVE-2020-36466Mediumcgc: Data races in cgc CVE-2020-36465Highgeneric-array: Use after free in generic-array CVE-2020-36464Highheapless: Use after free in heapless CVE-2020-36460Highmodel: Data races in model CVE-2020-36461Mediumnoise_search: Data races in noise_search CVE-2021-38195Criticallibsecp256k1: Overflow in libsecp256k1 CVE-2021-38196Highbetter-macro: Remote code execution in better-macro CVE-2021-38194Criticalark-r1cs-std: Calculation error in ark-r1cs-std CVE-2021-38193Mediumammonia: Cross-site Scripting in ammonia CVE-2021-38192Highprost-types: Overflow in prost-types CVE-2021-38191Mediumtokio: Race condition in tokio CVE-2021-38190Criticalnalgebra: Out of bounds write in nalgebra CVE-2021-38188Criticaliced-x86: Incorrect buffer size calculation in iced-x86

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo