Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2021-28036An issue was discovered in the quinn crate before 0.7.0 for Rust.crates.io · quinn · fixed in 0.5.4, 0.6.2, 0.7.0
- CVE-2021-28037An issue was discovered in the internment crate before 0.4.2 for Rust.crates.io · internment · fixed in 0.4.2
- CVE-2021-28033An issue was discovered in the byte_struct crate before 0.6.1 for Rust.crates.io · byte_struct · fixed in 0.6.1
- CVE-2021-28029An issue was discovered in the toodee crate before 0.3.0 for Rust.crates.io · toodee · fixed in 0.3.0
- CVE-2021-27671An issue was discovered in the comrak crate before 0.9.1 for Rust.crates.io · comrak · fixed in 0.9.1
- CVE-2021-27376An issue was discovered in the nb-connect crate before 1.0.3 for Rust.crates.io · nb-connect · fixed in 1.0.3
- CVE-2021-27377An issue was discovered in the yottadb crate before 1.2.0 for Rust.crates.io · yottadb · fixed in 1.2.0
- CVE-2021-27378An issue was discovered in the rand_core crate before 0.6.2 for Rust.crates.io · rand_core · fixed in 0.6.2
- CVE-2021-23841Null pointer deref in X509_issuer_and_serial_hash()crates.io · openssl-src · fixed in 111.14.0
- CVE-2021-23840Integer overflow in CipherUpdatecrates.io · openssl-src · fixed in 111.14.0
- CVE-2021-21299Multiple Transfer-Encoding headers misinterprets request payloadcrates.io · hyper · fixed in 0.14.3, 0.13.10, 0.12.36
- CVE-2021-26951An issue was discovered in the calamine crate before 0.17.0 for Rust.crates.io · calamine · fixed in 0.17.0
- CVE-2021-26952An issue was discovered in the ms3d crate before 0.1.3 for Rust.crates.io · ms3d · fixed in 0.1.3
- CVE-2021-26954An issue was discovered in the qwutils crate before 0.3.1 for Rust.crates.io · qwutils · fixed in 0.3.1
- CVE-2021-26955An issue was discovered in the xcb crate through 2021-02-04 for Rust.crates.io · xcb · fixed in 1.0.0
- CVE-2021-26957An issue was discovered in the xcb crate through 2021-02-04 for Rust.crates.io · xcb · fixed in 1.0.0
- CVE-2021-26958An issue was discovered in the xcb crate through 2021-02-04 for Rust.crates.io · xcb · fixed in 1.0.0
- CVE-2021-26956An issue was discovered in the xcb crate through 2021-02-04 for Rust.crates.io · xcb · fixed in 1.0.0
- CVE-2021-26953An issue was discovered in the postscript crate before 0.14.0 for Rust.crates.io · postscript · fixed in 0.14.0
- CVE-2021-26305An issue was discovered in Deserializer::read_vec in the cdr crate before 0.2.4 for Rust.crates.io · cdr · fixed in 0.2.4
- CVE-2021-26306An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust.crates.io · raw-cpuid · fixed in 9.0.0
- CVE-2021-26307An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust.crates.io · raw-cpuid · fixed in 9.0.0
- CVE-2021-26308An issue was discovered in the marc crate before 2.0.0 for Rust.crates.io · marc · fixed in 2.0.0
- CVE-2020-36202An issue was discovered in the async-h1 crate before 2.3.0 for Rust.crates.io · async-h1 · fixed in 2.3.0
- CVE-2020-36203An issue was discovered in the reffers crate through 2020-12-01 for Rust.crates.io · reffers · fixed in 0.6.1
- CVE-2020-36204An issue was discovered in the im crate through 2020-11-09 for Rust.crates.io · im · fixed in 15.1.0
- CVE-2020-36205An issue was discovered in the xcb crate through 2020-12-10 for Rust.crates.io · xcb · fixed in 1.0.0
- CVE-2020-36206An issue was discovered in the rusb crate before 0.7.0 for Rust.crates.io · rusb · fixed in 0.7.0
- CVE-2020-36207An issue was discovered in the aovec crate through 2020-12-10 for Rust.crates.io · aovec
- CVE-2020-36208An issue was discovered in the conquer-once crate before 0.3.2 for Rust.crates.io · conquer-once · fixed in 0.3.2