Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-35901Highactix-http: Use-after-free in actix-http CVE-2020-35914Mediumlock_api: Data races in lock_api CVE-2020-35910Mediumlock_api: Data races in lock_api CVE-2020-35896Highws: Insufficient size checks in ws CVE-2020-35895Criticalstack: Out-of-bounds write in stack CVE-2020-35897Mediumatom: Data races in atom CVE-2020-35898Criticalactix-utils: Use after free in actix-utils CVE-2020-35899Mediumactix-service: Use after free in actix-service CVE-2020-35886Mediumarr: Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr CVE-2020-35883Criticalmozwire: Path traversal in mozwire CVE-2020-35885Criticalalpm-rs: Double free in alpm-rs CVE-2020-35884Mediumtiny_http: HTTP Request smuggling in tiny_http CVE-2020-35887Criticalarr: Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr CVE-2020-35889Highcrayon: Memory safety violation in crayon CVE-2020-35891Highordnung: Double free in ordnung CVE-2020-35890Highordnung: Out of bounds read in ordnung CVE-2020-35892Criticalsimple-slab: Out of bounds read in simple-slab CVE-2020-35888Criticalarr: Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr CVE-2020-35893Highsimple-slab: Off-by-one error in simple-slab CVE-2020-35894Highobstack: Unaligned references in Obstack CVE-2020-35879Criticalrulinalg: Data races in rulinalg CVE-2020-35882Highrocket: Data races in rocket CVE-2020-35880Criticalbigint: Unsoundness in bigint CVE-2020-35881Criticaltraitobject: Out of bounds write in traitobject CVE-2020-35866Criticalrusqlite: Data races in rusqlite

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo