Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-5r5w-h76p-m726
    Fix available
    Packages

    github.com/foxcpp/maddy

    Summary

    Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy

    Published
    6 Jan 2022
    GHSA-9qj6-4rfq-vm84
    Fix available
    Packages

    actix-web

    Summary

    Out-of-bounds Write in actix-web

    Published
    6 Jan 2022
    GHSA-55m5-whcv-c49c
    Fix available
    Packages

    smallvec

    Summary

    Use of Uninitialized Resource in smallvec

    Published
    6 Jan 2022
    GHSA-hxjf-h2mh-r6hj
    Fix available
    Packages

    libpulse-binding

    Summary

    Use After Free in libpulse-binding

    Published
    6 Jan 2022
    GHSA-7x36-h62w-vw65
    Fix available
    Packages

    actix-web

    Summary

    Out-of-bounds Write in actix-web

    Published
    6 Jan 2022
    GHSA-fgfm-hqjw-3265
    Fix available
    Packages

    actix-web

    Summary

    Out-of-bounds Write in actix-web

    Published
    6 Jan 2022
    GHSA-p46c-w9m3-7qr2
    Fix available
    Packages

    flumedb

    Summary

    Use of Uninitialized Resource in flumedb.

    Published
    6 Jan 2022
    GHSA-xvcg-2q82-r87j
    Fix available
    Packages

    libpulse-binding

    Summary

    Panic mishandled in libpulse-binding

    Published
    6 Jan 2022
    GHSA-24g6-5rx7-58wj
    Fix available
    Packages

    pnet

    Summary

    Missing Initialization of Resource in pnet

    Published
    6 Jan 2022
    GHSA-jqpv-jm4m-86j9
    Fix available
    Packages

    libpulse-binding

    Summary

    Use After Free in libpulse-binding

    Published
    6 Jan 2022
    GHSA-799f-r78p-gq9c
    No fix available
    Packages

    acc_reader

    Summary

    Use of Uninitialized Resource in acc_reader.

    Published
    6 Jan 2022
    GHSA-p4cr-64x4-f92f
    No fix available
    Packages

    acc_reader

    Summary

    Use of Uninitialized Resource in acc_reader.

    Published
    6 Jan 2022
    GHSA-v938-qcc9-rwv8
    No fix available
    Packages

    buffoon

    Summary

    Use of Uninitialized Resource in buffoon.

    Published
    6 Jan 2022
    GHSA-v2ch-fc8f-qm33
    No fix available
    Packages

    bite

    Summary

    Use of Uninitialized Resource in bite.

    Published
    6 Jan 2022
    GHSA-jv2r-jx6q-89jg
    No fix available
    Packages

    bronzedb-protocol

    Summary

    Use of Uninitialized Resource in bronzedb-protocol.

    Published
    6 Jan 2022
    GHSA-w4cc-pc2h-whcj
    No fix available
    Packages

    derive-com-impl

    Summary

    Out-of-bounds Write in derive-com-impl

    Published
    6 Jan 2022
    GHSA-x76r-966h-5qv9
    Fix available
    Packages

    vec-const

    Summary

    Out-of-bounds Write in vec-const

    Published
    6 Jan 2022
    GHSA-cw4j-cf6c-mmfv
    No fix available
    Packages

    binjs_io

    Summary

    Use of Uninitialized Resource in binjs_io.

    Published
    6 Jan 2022
    GHSA-2rxc-8f9w-fjq8
    No fix available
    Packages

    rdiff

    Summary

    Window may read from uninitialized memory locations in rdiff

    Published
    6 Jan 2022
    GHSA-9783-42pm-x5jq
    Fix available
    Packages

    csv-sniffer

    Summary

    Use of Uninitialized Resource in csv-sniffer.

    Published
    6 Jan 2022
    GHSA-9mp7-45qh-r8j8
    No fix available
    Packages

    columnar

    Summary

    columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())

    Published
    6 Jan 2022
    GHSA-w428-f65r-h4q2
    Fix available
    Packages

    raw-cpuid

    Summary

    Deserialization of Untrusted Data in rust-cpuid

    Published
    6 Jan 2022
    GHSA-64wv-8vwp-xgw2
    Fix available
    Packages

    ash

    Summary

    Use of Uninitialized Resource in ash.

    Published
    6 Jan 2022
    GHSA-jqjj-r4qp-x2gh
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs.

    Published
    6 Jan 2022
    GHSA-jwfh-j623-m97h
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs

    Published
    6 Jan 2022
    GHSA-hr52-f9vp-582c
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs.

    Published
    6 Jan 2022
    GHSA-ff2r-xpwq-6whj
    No fix available
    Packages

    gfx-auxil

    Summary

    Use of Uninitialized Resource in gfx-auxil

    Published
    6 Jan 2022
    GHSA-vw5m-qw2r-m923
    No fix available
    Packages

    messagepack-rs

    Summary

    Use of Uninitialized Resource in messagepack-rs.

    Published
    6 Jan 2022
    GHSA-2gxj-qrp2-53jv
    No fix available
    Packages

    mopa

    Summary

    Incorrect reliance on Trait memory layout in mopa

    Published
    6 Jan 2022
    GHSA-8gjm-h3xj-mp6w
    Fix available
    Packages

    ckb

    Summary

    RPC call failure in ckb

    Published
    6 Jan 2022
    GHSA-6p3c-v8vc-c244
    Fix available
    Packages

    molecule

    Summary

    The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule.

    Published
    6 Jan 2022
    GHSA-fc7x-2cmc-8j2g
    Fix available
    Packages

    sha2

    Summary

    Incorrect hash in sha2

    Published
    6 Jan 2022
    GHSA-q2x5-6q7q-r872
    Fix available
    Packages

    tremor-script

    Summary

    Use After Free in tremor-script

    Published
    6 Jan 2022
    GHSA-cw98-cx2m-9qqg
    Fix available
    Packages

    ckb

    Summary

    Denial of Service in ckb

    Published
    6 Jan 2022
    GHSA-2969-8hh9-57jc
    Fix available
    Packages

    ckb

    Summary

    Allocation of Resources Without Limits or Throttling in ckb

    Published
    6 Jan 2022
    GHSA-qwvx-c8j7-5g75
    Fix available
    Packages

    tectonic_xdv

    Summary

    Use of Uninitialized Resource in tectonic_xdv

    Published
    6 Jan 2022
    GHSA-9qvw-46gf-4fv8
    Fix available
    Packages

    tremor-script

    Summary

    Use After Free in tremor-script

    Published
    6 Jan 2022
    GHSA-r57r-j98g-587f
    Fix available
    Packages

    nanorand

    Summary

    Pointer dereference in nanorand

    Published
    6 Jan 2022
    GHSA-cwvc-87xq-pc5m
    Fix available
    Packages

    metrics-util

    Summary

    Out-of-bounds Write and Race Condition in metrics-util

    Published
    6 Jan 2022
    GHSA-c5hx-w945-j4pq
    Fix available
    Packages

    zeroize_derive

    Summary

    Memory flaw in zeroize_derive

    Published
    6 Jan 2022
    GHSA-5vwc-r48g-wj6c
    No fix available
    Packages

    abomonation

    Summary

    Abomonation transmutes &T to and from &[u8] without sufficient constraints

    Published
    6 Jan 2022
    GHSA-76w9-p8mg-j927
    Fix available
    Packages

    nix, nix, nix

    Summary

    Out-of-bounds Write in nix

    Published
    6 Jan 2022
    GHSA-g4h2-4wvh-grc5
    Fix available
    Packages

    simple_asn1

    Summary

    Uncontrolled Resource Consumption in simple_asn1

    Published
    6 Jan 2022
    GHSA-9hfg-pxr6-q4vp
    No fix available
    Packages

    crypto2

    Summary

    Use of a Broken or Risky Cryptographic Algorithm in crypto2

    Published
    6 Jan 2022
    GHSA-fg7r-2g4j-5cgr
    Fix available
    Packages

    tokio, tokio

    Summary

    Race Condition in tokio

    Published
    6 Jan 2022
    GHSA-xvvv-wj7j-r9jm
    Fix available
    Packages

    netgen/tagsbundle, netgen/tagsbundle

    Summary

    Cross-site Scripting in Netgen Tags Bundle

    Published
    6 Jan 2022
    GHSA-xrg3-hmf3-rvgw
    Fix available
    Packages

    rust-embed

    Summary

    Path Traversal in rust-embed

    Published
    6 Jan 2022
    GHSA-cm8g-544f-p9x9
    Fix available
    Packages

    rusqlite, rusqlite

    Summary

    Use After Free in rusqlite

    Published
    6 Jan 2022
    GHSA-92cx-4xm7-jr9m
    Fix available
    Packages

    rusqlite, rusqlite

    Summary

    Use After Free in rusqlite

    Published
    6 Jan 2022
    GHSA-f6f2-3w33-54r9
    Fix available
    Packages

    rusqlite, rusqlite

    Summary

    Use After Free in rusqlite

    Published
    6 Jan 2022