Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    GHSA-2wc6-2rcj-8v76
    Fix available
    Packages

    sodiumoxide

    Summary

    scalarmult() vulnerable to degenerate public keys

    Published
    25 Aug 2021
    GHSA-7mg7-m5c3-3hqj
    Fix available
    Packages

    unicycle

    Summary

    Data races in unicycle

    Published
    25 Aug 2021
    GHSA-pfjq-935c-4895
    Fix available
    Packages

    v9

    Summary

    Data races in v9

    Published
    25 Aug 2021
    GHSA-gq4h-f254-7cw9
    Fix available
    Packages

    ticketed_lock

    Summary

    Duplicate Advisory: Data races in ticketed_lock

    Published
    25 Aug 2021
    GHSA-m296-j53x-xv95
    Fix available
    Packages

    tiny_future

    Summary

    Data races in tiny_future

    Published
    25 Aug 2021
    GHSA-8q5c-93vg-c747
    No fix available
    Packages

    toolshed

    Summary

    WITHDRAWN

    Published
    25 Aug 2021
    GHSA-r88h-6987-g79f
    Fix available
    Packages

    syncpool

    Summary

    Duplicate Advisory: Data races on syncpool

    Published
    25 Aug 2021
    GHSA-66p5-j55p-32r9
    Fix available
    Packages

    smallvec

    Summary

    smallvec creates uninitialized value of any type

    Published
    25 Aug 2021
    GHSA-p5w9-856p-8q4g
    Fix available
    Packages

    socket2

    Summary

    Assumed memory layout of std::net::SocketAddr

    Published
    25 Aug 2021
    GHSA-83r8-p8v6-6gfm
    Fix available
    Packages

    slock

    Summary

    Slock<T> allows sending non-Send types across thread boundaries

    Published
    25 Aug 2021
    GHSA-39vw-qp34-rmwf
    Fix available
    Packages

    serde_yaml

    Summary

    Uncontrolled recursion leads to abort in deserialization

    Published
    25 Aug 2021
    GHSA-8892-84wf-cg8f
    No fix available
    Packages

    signal-simple

    Summary

    SyncChannel<T> can move 'T: !Send' to other threads

    Published
    25 Aug 2021
    GHSA-v42f-j8fx-99f3
    No fix available
    Packages

    scottqueue

    Summary

    Queue<T> should have a Send bound on its Send/Sync traits

    Published
    25 Aug 2021
    GHSA-vj88-5667-w56p
    Fix available
    Packages

    ruspiro-singleton

    Summary

    Singleton lacks bounds on Send and Sync.

    Published
    25 Aug 2021
    GHSA-mcrf-7hf9-f6q5
    Fix available
    Packages

    rmpv

    Summary

    Unchecked vector pre-allocation

    Published
    25 Aug 2021
    GHSA-jh2g-xhqq-x4w9
    Fix available
    Packages

    rcu_cell

    Summary

    Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>

    Published
    25 Aug 2021
    GHSA-xwxc-j97j-84gf
    No fix available
    Packages

    parc

    Summary

    Race condition in Parc

    Published
    25 Aug 2021
    GHSA-r6ff-2q3c-v3pv
    Fix available
    Packages

    pnet

    Summary

    Compiler optimisation leads to SEGFAULT

    Published
    25 Aug 2021
    GHSA-mgg8-9pvp-6qcw
    No fix available
    Packages

    noise_search

    Summary

    MvccRwLock allows data races & aliasing violations

    Published
    25 Aug 2021
    GHSA-jf43-3v8j-qwwr
    No fix available
    Packages

    multiqueue

    Summary

    Data races in multiqueue

    Published
    25 Aug 2021
    GHSA-8q64-wrfr-q48c
    No fix available
    Packages

    model

    Summary

    Data races in model

    Published
    25 Aug 2021
    GHSA-rmff-f8w9-c9rm
    Fix available
    Packages

    max7301

    Summary

    Data races in max7301

    Published
    25 Aug 2021
    GHSA-3vv3-frrq-6486
    No fix available
    Packages

    alg_ds

    Summary

    Use of Uninitialized Resource in alg_ds

    Published
    25 Aug 2021
    GHSA-jwph-qp5h-f9wj
    No fix available
    Packages

    bunch

    Summary

    Data races in bunch

    Published
    25 Aug 2021
    GHSA-rpxm-vmr7-5f5f
    No fix available
    Packages

    convec

    Summary

    Data races in convec

    Published
    25 Aug 2021
    GHSA-36cg-4jff-5863
    No fix available
    Packages

    signal-simple

    Summary

    Data races in signal-simple

    Published
    25 Aug 2021
    GHSA-9j8q-m9x5-9g6j
    No fix available
    Packages

    async-coap

    Summary

    Data races in async-coap

    Published
    25 Aug 2021
    GHSA-m7w4-8wp8-m2xq
    Fix available
    Packages

    beef

    Summary

    Data races in beef

    Published
    25 Aug 2021
    GHSA-r626-fc64-3q28
    Fix available
    Packages

    abox

    Summary

    Data race in abox

    Published
    25 Aug 2021
    GHSA-gvcp-948f-8f2p
    Fix available
    Packages

    libp2p-deflate

    Summary

    Use of Uninitialized Resource in libp2p-deflate

    Published
    25 Aug 2021
    GHSA-f6g6-54hm-fhxv
    Fix available
    Packages

    libsbc

    Summary

    Data races in libsbc

    Published
    25 Aug 2021
    GHSA-77m6-x95j-75r5
    Fix available
    Packages

    ticketed_lock

    Summary

    Data races in ticketed_lock

    Published
    25 Aug 2021
    GHSA-fg42-vwxx-xx5j
    Fix available
    Packages

    tiny_future

    Summary

    Data race in tiny_future

    Published
    25 Aug 2021
    GHSA-368f-29c3-4f2r
    Fix available
    Packages

    conqueue

    Summary

    Data race in conqueue

    Published
    25 Aug 2021
    GHSA-32v7-ghpr-c8hg
    No fix available
    Packages

    ncurses

    Summary

    Mishandling of format strings in ncurses

    Published
    25 Aug 2021
    GHSA-g7r5-x7cr-vm3v
    No fix available
    Packages

    ncurses

    Summary

    Buffer overflow and format vulnerabilities in ncurses

    Published
    25 Aug 2021
    GHSA-m57c-4vvx-gjgq
    No fix available
    Packages

    pancurses

    Summary

    Format string vulnerabilities in pancurses

    Published
    25 Aug 2021
    GHSA-6c65-xcf5-299x
    Fix available
    Packages

    generator

    Summary

    Uninitialized memory use in generator

    Published
    25 Aug 2021
    GHSA-62jx-8vmh-4mcw
    Fix available
    Packages

    tar

    Summary

    Links in archive can create arbitrary directories

    Published
    25 Aug 2021
    GHSA-8928-2fgm-6x9x
    Fix available
    Packages

    actix-http

    Summary

    HTTP Request Smuggling in actix-http

    Published
    25 Aug 2021
    GHSA-fqq2-xp7m-xvm8
    Fix available
    Packages

    ruspiro-singleton

    Summary

    Data race in ruspiro-singleton

    Published
    25 Aug 2021
    GHSA-686f-ch3r-xwmh
    Fix available
    Packages

    unicycle

    Summary

    Data races in unicycle

    Published
    25 Aug 2021
    GHSA-2f5j-3mhq-xv58
    Fix available
    Packages

    sys-info

    Summary

    Double free in sys-info

    Published
    25 Aug 2021
    GHSA-qg24-8xj4-gj2h
    No fix available
    Packages

    chunky

    Summary

    Unaligned memory allocation in chunky

    Published
    25 Aug 2021
    GHSA-vp6r-mrq9-8f4h
    Fix available
    Packages

    syncpool

    Summary

    Data race in syncpool

    Published
    25 Aug 2021
    GHSA-f997-8gxg-r354
    No fix available
    Packages

    lexer

    Summary

    Data races in lexer

    Published
    25 Aug 2021
    GHSA-r2x6-vrxx-jgv4
    No fix available
    Packages

    multiqueue

    Summary

    Data races in multiqueue

    Published
    25 Aug 2021
    GHSA-hxw9-jxqw-jc8j
    No fix available
    Packages

    dces

    Summary

    Data races in dces

    Published
    25 Aug 2021
    GHSA-2r6q-6c8c-g762
    No fix available
    Packages

    toolshed

    Summary

    Data races in toolshed

    Published
    25 Aug 2021
    GHSA-mc36-5m36-hjh5
    Fix available
    Packages

    slock

    Summary

    Data races in slock

    Published
    25 Aug 2021