Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-c9pr-q8gx-3mgp
  • crates.io/tauri-plugin-shell
  • npm/@tauri-apps/plugin-shell
 Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell` 8 hours ago
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-pph8-gcv7-4qj5
  • crates.io/pyo3
 PyO3 Risk of buffer overflow in `PyString::from_object` 17 hours ago
  • Fix available
  • Severity - 2.9 (Low)
GHSA-6xfj-hhwh-r3c2
  • crates.io/ouch
 Ouch Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability yesterday
  • Fix available
  • Severity - 4.8 (Medium)
RUSTSEC-2025-0020
  • crates.io/pyo3
 Risk of buffer overflow in `PyString::from_object` yesterday
  • Fix available
GHSA-67r5-rqwv-9p9q
  • crates.io/array-init-cursor
 array-init-cursor is unsound when used with types that implement `Drop` 2 days ago
  • Fix available
  • Severity - 2.9 (Low)
GHSA-j8x2-777p-23fc
  • crates.io/tough
 tough cyclic delegation graphs are not detected 5 days ago
  • Fix available
  • Severity - 2.7 (Low)
GHSA-v4wr-j3w6-mxqc
  • crates.io/tough
 tough terminating targets role delegations are not respected 5 days ago
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-5vmp-m5v2-hx47
  • crates.io/tough
 tough root metadata version is not checked for sequential versioning 5 days ago
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-76g3-38jv-wxh4
  • crates.io/tough
 tough timestamp metadata is cached when it fails snapshot rollback check 5 days ago
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-q6r9-r9pw-4cf7
  • crates.io/tough
 tough failure to detect delegated target rollback 5 days ago
  • Fix available
  • Severity - 5.7 (Medium)
RUSTSEC-2025-0019
  • crates.io/array-init-cursor
 `array-init-cursor` in version 0.2.0 and below is unsound when used with types that implement `Drop` 6 days ago
  • Fix available
GHSA-9cc5-2pq7-hfj8
  • crates.io/xmas-elf
 xmas-elf potential out-of-bounds read with a malformed ELF file and the HashTable API. 26 Mar
  • Fix available
  • Severity - 6.9 (Medium)
RUSTSEC-2025-0018
  • crates.io/xmas-elf
 Potential out-of-bounds read with a malformed ELF file and the HashTable API. 26 Mar
  • Fix available
GHSA-fc83-9jwq-gc2m
  • crates.io/web-push
 Web Push Denial of Service via malicious Web Push endpoint 24 Mar
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-vgmh-mqm4-8j88
  • crates.io/pared
 pared Vulnerable to Use After Free in `Parc` and `Prc` Due to Missing Lifetime Constraints 24 Mar
  • Fix available
  • Severity - 6.8 (Medium)
RUSTSEC-2025-0017
  • crates.io/trust-dns-proto
 The `trust-dns` project has been rebranded to `hickory-dns` 23 Mar
  • No fix available
Load more...