Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2021-30455An issue was discovered in the id-map crate through 2021-02-26 for Rust.crates.io · id-map
- CVE-2021-30457An issue was discovered in the id-map crate through 2021-02-26 for Rust.crates.io · id-map
- CVE-2021-30456An issue was discovered in the id-map crate through 2021-02-26 for Rust.crates.io · id-map
- CVE-2021-29929An issue was discovered in the endian_trait crate through 2021-01-04 for Rust.crates.io · endian_trait
- CVE-2021-29930An issue was discovered in the arenavec crate through 2021-01-12 for Rust.crates.io · arenavec
- CVE-2021-29931An issue was discovered in the arenavec crate through 2021-01-12 for Rust.crates.io · arenavec
- CVE-2021-29932An issue was discovered in the parse_duration crate through 2021-03-18 for Rust.crates.io · parse_duration
- CVE-2021-29933An issue was discovered in the insert_many crate through 2021-01-26 for Rust.crates.io · insert_many
- CVE-2021-29934An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust.crates.io · uu_od · fixed in 0.0.4
- CVE-2021-29935An issue was discovered in the rocket crate before 0.4.7 for Rust.crates.io · rocket · fixed in 0.4.7
- CVE-2021-29936An issue was discovered in the adtensor crate through 2021-01-11 for Rust.crates.io · adtensor
- CVE-2021-29937An issue was discovered in the telemetry crate through 2021-02-17 for Rust.crates.io · telemetry · fixed in 0.1.3
- CVE-2021-29938An issue was discovered in the slice-deque crate through 2021-02-19 for Rust.crates.io · slice-deque
- CVE-2021-29939An issue was discovered in the stackvector crate through 2021-02-19 for Rust.crates.io · stackvector · fixed in 1.0.9
- CVE-2021-29940An issue was discovered in the through crate through 2021-02-18 for Rust.crates.io · through
- CVE-2021-29941An issue was discovered in the reorder crate through 2021-02-24 for Rust.crates.io · reorder · fixed in 1.1.0
- CVE-2021-29942An issue was discovered in the reorder crate through 2021-02-24 for Rust.crates.io · reorder · fixed in 1.1.0
- CVE-2021-3450CA certificate check bypass with X509_V_FLAG_X509_STRICTcrates.io · openssl-src · fixed in 111.15.0
- CVE-2021-3449NULL pointer deref in signature_algorithms processingcrates.io · openssl-src · fixed in 111.15.0
- CVE-2021-28305An issue was discovered in the diesel crate before 1.4.6 for Rust.crates.io · diesel · fixed in 1.4.6
- CVE-2021-28306An issue was discovered in the fltk crate before 0.15.3 for Rust.crates.io · fltk · fixed in 0.15.3
- CVE-2021-28307An issue was discovered in the fltk crate before 0.15.3 for Rust.crates.io · fltk · fixed in 0.15.3
- CVE-2021-28308An issue was discovered in the fltk crate before 0.15.3 for Rust.crates.io · fltk · fixed in 0.15.3
- CVE-2021-28027An issue was discovered in the bam crate before 0.1.3 for Rust.crates.io · bam · fixed in 0.1.3
- CVE-2021-28028An issue was discovered in the toodee crate before 0.3.0 for Rust.crates.io · toodee · fixed in 0.3.0
- CVE-2021-28030An issue was discovered in the truetype crate before 0.30.1 for Rust.crates.io · truetype · fixed in 0.30.1
- CVE-2021-28031An issue was discovered in the scratchpad crate before 1.3.1 for Rust.crates.io · scratchpad · fixed in 1.3.1
- CVE-2021-28032An issue was discovered in the nano_arena crate before 0.5.2 for Rust.crates.io · nano_arena · fixed in 0.5.2
- CVE-2021-28034An issue was discovered in the stack_dst crate before 0.6.1 for Rust.crates.io · stack_dst · fixed in 0.6.1
- CVE-2021-28035An issue was discovered in the stack_dst crate before 0.6.1 for Rust.crates.io · stack_dst · fixed in 0.6.1