Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2020-36209An issue was discovered in the late-static crate before 0.4.0 for Rust.crates.io · late-static · fixed in 0.4.0
- CVE-2020-36210An issue was discovered in the autorand crate before 0.2.3 for Rust.crates.io · autorand · fixed in 0.2.3
- CVE-2020-36211An issue was discovered in the gfwx crate before 0.3.0 for Rust.crates.io · gfwx · fixed in 0.3.0
- CVE-2020-36212An issue was discovered in the abi_stable crate before 0.9.1 for Rust.crates.io · abi_stable · fixed in 0.9.1
- CVE-2020-36213An issue was discovered in the abi_stable crate before 0.9.1 for Rust.crates.io · abi_stable · fixed in 0.9.1
- CVE-2020-36214An issue was discovered in the multiqueue2 crate before 0.1.7 for Rust.crates.io · multiqueue2 · fixed in 0.1.7
- CVE-2020-36215An issue was discovered in the hashconsing crate before 1.1.0 for Rust.crates.io · hashconsing · fixed in 1.1.0
- CVE-2020-36216An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust.crates.io · eventio · fixed in 0.5.1
- CVE-2020-36217An issue was discovered in the may_queue crate through 2020-11-10 for Rust.crates.io · may_queue · fixed in 0.1.8
- CVE-2020-36218An issue was discovered in the buttplug crate before 1.0.4 for Rust.crates.io · buttplug · fixed in 1.0.4
- CVE-2020-36219An issue was discovered in the atomic-option crate through 2020-10-31 for Rust.crates.io · atomic-option
- CVE-2020-36220An issue was discovered in the va-ts crate before 0.0.4 for Rust.crates.io · va-ts · fixed in 0.0.4
- CVE-2021-25900An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust.crates.io · smallvec · fixed in 0.6.14, 1.6.1
- CVE-2021-25901An issue was discovered in the lazy-init crate through 2021-01-17 for Rust.crates.io · lazy-init · fixed in 0.4.1-0, 0.4.0
- CVE-2021-25902An issue was discovered in the glsl-layout crate before 0.4.0 for Rust.crates.io · glsl-layout · fixed in 0.4.0
- CVE-2021-25903An issue was discovered in the cache crate through 2021-01-01 for Rust.crates.io · cache
- CVE-2021-25904An issue was discovered in the av-data crate before 0.3.0 for Rust.crates.io · av-data · fixed in 0.3.0
- CVE-2021-25905An issue was discovered in the bra crate before 0.1.1 for Rust.crates.io · bra · fixed in 0.1.1
- CVE-2021-25906An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust.crates.io · basic_dsp_matrix · fixed in 0.9.2
- CVE-2021-25907An issue was discovered in the containers crate before 0.9.11 for Rust.crates.io · containers · fixed in 0.9.11
- CVE-2021-25908An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust.crates.io · fil-ocl
- CVE-2021-21235Infinite loop in parsing PNG files incrates.io · kamadak-exif · fixed in 0.5.3
- CVE-2020-26297XSS in mdBook's search pagecrates.io · mdbook · fixed in 0.4.5
- CVE-2018-25001An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust.crates.io · libpulse-binding · fixed in 2.5.0
- CVE-2019-25001An issue was discovered in the serde_cbor crate before 0.10.2 for Rust.crates.io · serde_cbor · fixed in 0.10.2
- CVE-2019-25002An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust.crates.io · sodiumoxide · fixed in 0.2.5
- CVE-2019-25003An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust.crates.io · libsecp256k1 · fixed in 0.3.1
- CVE-2019-25004An issue was discovered in the flatbuffers crate before 0.6.1 for Rust.crates.io · flatbuffers · fixed in 0.6.1
- CVE-2019-25005An issue was discovered in the chacha20 crate before 0.2.3 for Rust.crates.io · chacha20 · fixed in 0.2.3
- CVE-2019-25006An issue was discovered in the streebog crate before 0.8.0 for Rust.crates.io · streebog · fixed in 0.8.0