Packages
Every advisory and malicious release affecting an open source package on npm, PyPI, Go, Maven, crates.io, NuGet, RubyGems, Packagist or Hex, newest first. See the worst packages this week, or check your lockfile.
- CVE-2020-35915An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust.crates.io · futures-intrusive · fixed in 0.4.0
- CVE-2020-35916An issue was discovered in the image crate before 0.23.12 for Rust.crates.io · image · fixed in 0.23.12
- CVE-2020-35917An issue was discovered in the pyo3 crate before 0.12.4 for Rust.crates.io · pyo3 · fixed in 0.12.4
- CVE-2020-35918An issue was discovered in the branca crate before 0.10.0 for Rust.crates.io · branca · fixed in 0.10.0
- CVE-2020-35919An issue was discovered in the net2 crate before 0.2.36 for Rust.crates.io · net2, socket2 · fixed in 0.2.36, 0.3.16
- CVE-2020-35920An issue was discovered in the socket2 crate before 0.3.16 for Rust.crates.io · net2, socket2 · fixed in 0.2.36, 0.3.16
- CVE-2020-35921An issue was discovered in the miow crate before 0.3.6 for Rust.crates.io · miow · fixed in 0.2.2, 0.3.6
- CVE-2020-35922An issue was discovered in the mio crate before 0.7.6 for Rust.crates.io · mio · fixed in 0.7.6
- CVE-2020-35923An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust.crates.io · ordered-float · fixed in 1.1.1, 2.0.1
- CVE-2020-35924An issue was discovered in the try-mutex crate before 0.3.0 for Rust.crates.io · try-mutex · fixed in 0.3.0
- CVE-2020-35925An issue was discovered in the magnetic crate before 2.0.1 for Rust.crates.io · magnetic · fixed in 2.0.1
- CVE-2020-35926An issue was discovered in the nanorand crate before 0.5.1 for Rust.crates.io · nanorand · fixed in 0.5.1
- CVE-2020-35927An issue was discovered in the thex crate through 2020-12-08 for Rust.crates.io · thex
- CVE-2020-35928An issue was discovered in the concread crate before 0.2.6 for Rust.crates.io · concread · fixed in 0.2.6
- CVE-2020-35857An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust.crates.io · trust-dns-server · fixed in 0.18.1
- CVE-2020-35711An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust.crates.io · arc-swap · fixed in 0.4.8, 1.1.0
- CVE-2020-26281request smuggling in async-h1crates.io · async-h1 · fixed in 2.3.0
- CVE-2020-26235Segmentation fault in Rust time cratecrates.io · time · fixed in 0.2.23, 0.2.0, 0.2.1 and more
- CVE-2020-28247The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.crates.io · lettre · fixed in 0.7.1, 0.8.4, 0.9.5 and more
- CVE-2020-15254Undefined Behavior in bounded Crossbeam channelcrates.io · crossbeam-channel · fixed in 0.4.4
- CVE-2020-25791An issue was discovered in the sized-chunks crate through 0.6.2 for Rust.crates.io · sized-chunks · fixed in 0.6.3
- CVE-2020-25793An issue was discovered in the sized-chunks crate through 0.6.2 for Rust.crates.io · sized-chunks · fixed in 0.6.3
- CVE-2020-25794An issue was discovered in the sized-chunks crate through 0.6.2 for Rust.crates.io · sized-chunks · fixed in 0.6.3
- CVE-2020-25795An issue was discovered in the sized-chunks crate through 0.6.2 for Rust.crates.io · sized-chunks · fixed in 0.6.3
- CVE-2020-25796An issue was discovered in the sized-chunks crate through 0.6.2 for Rust.crates.io · sized-chunks · fixed in 0.6.3
- CVE-2020-25792An issue was discovered in the sized-chunks crate through 0.6.2 for Rust.crates.io · sized-chunks · fixed in 0.6.3
- CVE-2020-8927Buffer overflow in Brotli librarycrates.io · brotli-sys, compu-brotli-sys · fixed in 1.0.9
- CVE-2020-25573An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust.crates.io · linked-hash-map · fixed in 0.5.3
- CVE-2020-25574An issue was discovered in the http crate before 0.1.20 for Rust.crates.io · http · fixed in 0.1.20
- CVE-2020-25576An issue was discovered in the rand_core crate before 0.4.2 for Rust.crates.io · rand_core · fixed in 0.4.2, 0.3.1