Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

sudo-rs

5 known vulnerabilities (1 medium, 4 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 medium, 4 low
Registry
crates.io

Advisories 5

  • CVE-2025-64517Medium 4.4

    sudo-rs doesn't record authenticating user properly in timestamp

    Affected: from 0.2.5, fixed in 0.2.10.

  • sudo-rs: Partial password reveal is possible after timeout

    Affected: from 0.2.7, fixed in 0.2.10.

  • sudo-rs Allows Low Privilege Users to Enumerate Privileges of Others

    Affected: fixed in 0.2.6.

  • sudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders

    Affected: fixed in 0.2.6.

  • sudo-rs Session File Relative Path Traversal vulnerability

    Affected: fixed in 0.2.1; fixed in 0.2.1.