Cargo vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2020-35878Criticalozone: Drop of uninitialized memory in Ozone CVE-2020-35862Criticalbitvec: Use after free and double free in bitvec CVE-2020-35864Highflatbuffers: Dangling reference in flatbuffers CVE-2020-35869Criticalrusqlite: Mishandling of format strings in rusqlite CVE-2020-35860Criticalcbox: NULL Pointer Dereference in cbox CVE-2020-35861Highbumpalo: Out of bounds read in bumpalo CVE-2020-35872Criticalrusqlite: Improper type usage in rusqlite CVE-2020-35871Highrusqlite: Data races in rusqlite CVE-2020-35876Criticalrio: Use after free in rio CVE-2020-35875Hightokio-rustls: Excessive memory usage in tokio-rustls CVE-2020-35874Highinternment: Use after free in internment CVE-2019-25004Criticalflatbuffers: Unsound casting in flatbuffers CVE-2019-25003Highlibsecp256k1: libsecp256k1 contains side-channel timing attack CVE-2019-25009Criticalhttp: Double free in http CVE-2019-25007Highstreebog: Incorrect implementation in streebog CVE-2019-25010Criticalfailure: Rust Failure Crate Vulnerable to Type confusion CVE-2020-35859Criticallucet-runtime-internals: Out of bounds access in lucet-runtime-internals CVE-2020-35857Hightrust-dns-server: Stack consumption in trust-dns-server CVE-2020-35858Criticalprost: Out of bounds write in prost CVE-2020-35863Criticalhyper: HTTP Request Smuggling in hyper CVE-2020-25792Highsized-chunks: Array size is not checked in sized-chunks CVE-2020-25796Highsized-chunks: Unaligned references in sized-chunks CVE-2020-25794Highsized-chunks: Missing release of memory in sized-chunks CVE-2019-25002Criticalsodiumoxide: Incorrect Comparison in sodiumoxide CVE-2019-25001Highserde_cbor: Out of bounds write in serde_cbor

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo