Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-35921Mediummiow: miow invalidly assumes the memory layout of std::net::SocketAddr CVE-2020-35922Mediummio: mio invalidly assumes the memory layout of std::net::SocketAddr CVE-2020-35923Mediumordered-float: ordered_float:NotNan may contain NaN after panic in assignment operators CVE-2020-35924Mediumtry-mutex: Data races in try-mutex CVE-2020-35927Mediumthex: Data races in thex CVE-2020-35926Mediumnanorand: Improper random number generation in nanorand CVE-2020-35928Mediumconcread: Data races in concread CVE-2020-35925Mediummagnetic: Data races in magnetic CVE-2020-35913Mediumlock_api: Data races in lock_api CVE-2020-35912Mediumlock_api: Data races in lock_api CVE-2020-35915Mediumfutures-intrusive: Data races in futures-intrusive CVE-2020-35911Mediumlock_api: Data races in lock_api CVE-2020-35916Mediumimage: Mutable reference with immutable provenance in image CVE-2020-35917Mediumpyo3: Reference counting error in pyo3 CVE-2020-35918Mediumbranca: Unexpected panic when decoding tokens in branca CVE-2020-35903Mediumdync: Out of bounds read in dync CVE-2020-35902Criticalactix-codec: Use-after-free in actix-codec CVE-2020-35904Mediumcrossbeam-channel: Incorrect buffer size in crossbeam-channel CVE-2020-35909Highmultihash: Unexpected panic in multihash CVE-2020-35901Highactix-http: Use-after-free in actix-http CVE-2020-35914Mediumlock_api: Data races in lock_api CVE-2020-35910Mediumlock_api: Data races in lock_api CVE-2020-35896Highws: Insufficient size checks in ws CVE-2020-35895Criticalstack: Out-of-bounds write in stack CVE-2020-35897Mediumatom: Data races in atom

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo