Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2019-25007An issue was discovered in the streebog crate before 0.8.0 for Rust.crates.io · streebog · fixed in 0.8.0
- CVE-2019-25009An issue was discovered in the http crate before 0.1.20 for Rust.crates.io · http · fixed in 0.1.20
- CVE-2019-25010An issue was discovered in the failure crate through 2019-11-13 for Rust.crates.io · failure
- CVE-2020-35858An issue was discovered in the prost crate before 0.6.1 for Rust.crates.io · prost · fixed in 0.6.1
- CVE-2020-35859An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust.crates.io · lucet-runtime-internals · fixed in 0.4.3, 0.5.1
- CVE-2020-35860An issue was discovered in the cbox crate through 2020-03-19 for Rust.crates.io · cbox
- CVE-2020-35861An issue was discovered in the bumpalo crate before 3.2.1 for Rust.crates.io · bumpalo · fixed in 3.2.1
- CVE-2020-35862An issue was discovered in the bitvec crate before 0.17.4 for Rust.crates.io · bitvec · fixed in 0.17.4
- CVE-2020-35863An issue was discovered in the hyper crate before 0.12.34 for Rust.crates.io · hyper · fixed in 0.12.34
- CVE-2020-35864An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust.crates.io · flatbuffers · fixed in 2.0.0
- CVE-2020-35865An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust.crates.io · os_str_bytes · fixed in 2.0.0
- CVE-2020-35866An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35867An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35868An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35869An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35870An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35871An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35872An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35873An issue was discovered in the rusqlite crate before 0.23.0 for Rust.crates.io · rusqlite · fixed in 0.23.0
- CVE-2020-35874An issue was discovered in the internment crate through 2020-05-28 for Rust.crates.io · internment · fixed in 0.4.0
- CVE-2020-35875An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust.crates.io · tokio-rustls · fixed in 0.12.3, 0.13.1
- CVE-2020-35876An issue was discovered in the rio crate through 2020-05-11 for Rust.crates.io · rio
- CVE-2020-35877An issue was discovered in the ozone crate through 2020-07-04 for Rust.crates.io · ozone
- CVE-2020-35878An issue was discovered in the ozone crate through 2020-07-04 for Rust.crates.io · ozone
- CVE-2020-35879An issue was discovered in the rulinalg crate through 2020-02-11 for Rust.crates.io · rulinalg
- CVE-2020-35880An issue was discovered in the bigint crate through 2020-05-07 for Rust.crates.io · bigint
- CVE-2020-35881An issue was discovered in the traitobject crate through 2020-06-01 for Rust.crates.io · traitobject
- CVE-2020-35882An issue was discovered in the rocket crate before 0.4.5 for Rust.crates.io · rocket · fixed in 0.4.5
- CVE-2020-35883An issue was discovered in the mozwire crate through 2020-08-18 for Rust.crates.io · mozwire · fixed in 0.5.0, 0.4.2-0
- CVE-2020-35884An issue was discovered in the tiny_http crate through 2020-06-16 for Rust.crates.io · tiny_http · fixed in 0.6.3, 0.8.0