Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2021-38187Criticalanymap: Incorrect cast in anymap CVE-2021-38186Mediumcomrak: Cross-site Scripting in comrak GHSA-773Q-5334-5GF9Mediumevm-core: Memory over-allocation in evm-core GHSA-8XW8-MMQV-FRQQHighfake-static: fake-static allows converting any reference into a `'static` reference CVE-2021-27377Criticalyottadb: Use-after-free in yottadb CVE-2017-1000430Criticalbase64: Integer overflow in base64 CVE-2021-30454Criticalouter_cgi: Uninitialized memory access in outer_cgi CVE-2021-30456Criticalid-map: Double-free in id-map CVE-2021-30457Criticalid-map: Double-free in id-map CVE-2021-30455Criticalid-map: Double-free in id-map CVE-2021-29930Higharenavec: Out of bounds write in arenavec CVE-2021-29933Highinsert_many: Double free in insert_many CVE-2021-29931Higharenavec: Double free in arenavec CVE-2021-29934Highuu_od: Out of bounds read in uu_od CVE-2021-29937Criticaltelemetry: Free of uninitialized memory in telemetry CVE-2021-29935Highrocket: Use after free in Rocket CVE-2021-29936Criticaladtensor: Free of uninitialized memory in adtensor CVE-2021-29938Highslice-deque: Double free in slice-deque CVE-2021-29939Highstackvector: Out of bounds write in stackvector CVE-2021-29940Criticalthrough: Double free in through CVE-2021-29942Highreorder: Out of bounds write in reorder CVE-2021-29941Highreorder: Out of bounds write in reorder CVE-2021-29929Highendian_trait: Double free in endian_trait CVE-2021-29932Highparse_duration: Uncontrolled Resource Consumption in parse_duration CVE-2021-3449Mediumopenssl-src: openssl-src NULL pointer Dereference in signature_algorithms processing

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo