Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Advisories

Loading...
High
GSA_kwCzR0hTQS13aDZ3LTM4MjgtZzlxZs4AAv0W
Wasmtime may have data leakage between instances in the pooling allocator
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS00NG1yLTh2bW0td2poZ84AAv0V
Wasmtime out of bounds read/write with zero-memory-pages configuration
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: 3 months ago
Moderate
GSA_kwCzR0hTQS03ZjZ4LWp3aDUtbTlyNM4AAtkN
Cranelift vulnerable to miscompilation of constant values in division on AArch64
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 7 months ago
Moderate
GSA_kwCzR0hTQS01ZmhqLWczcDMtcHE5Z84AAtg8
Wasmtime vulnerable to Use After Free with `externref`s
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 7 months ago
Moderate
GSA_kwCzR0hTQS1qcXdjLWM0OXItNHcyeM4AAtBw
Miscompilation of `i8x16.swizzle` and `select` with v128 inputs
Ecosystems: cargo
Packages: cranelift-codegen, wasmtime
Source: GitHub Advisory Database
Published: 7 months ago
High
GSA_kwCzR0hTQS1nd2M5LTM0OHgtcXd2Ms03ng
Use after free in Wasmtime
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: 10 months ago
Moderate
GSA_kwCzR0hTQS04OHhxLXc4Y3EteGZnN80sbg
Invalid drop of partially-initialized instances in the pooling instance allocator for modules with defined `externref` globals
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: 12 months ago
Moderate
GSA_kwCzR0hTQS1xODc5LTlnOTUtNTZteM0V3Q
Wrong type for `Linker`-define functions when used across two `Engine`s
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00ODczLTM2aDktd3Y0Oc0V3A
Out-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS12NGNwLWg5NHItbTd4Zs0V2w
Use after free passing `externref`s to Wasm in Wasmtime
Ecosystems: cargo
Packages: wasmtime
Source: GitHub Advisory Database
Published: over 1 year ago
Filter by Package
openssl-src 17 rusqlite 16 wasmtime 10 ckb 10 hyper 7 Simple-Wayland-HotKey-Daemon 6 libpulse-binding 6 smallvec 6 sized-chunks 6 messagepack-rs 5 xcb 5 lock_api 5 deno 4 cranelift-codegen 4 tokio 4 frontier 4 actix-web 4 flatbuffers 3 apache-avro 3 http 3 crossbeam-channel 3 tremor-script 3 raw-cpuid 3 nanorand 3 ammonia 3 crossbeam 3 arrow 3 acc_reader 3 solana_rbpf 3 cargo 3 tough 3 streebog 3 arr 3 fltk 3 id-map 3 cgc 3 generator 3 pleaser 3 rulex 2 opcua 2 tauri 2 hyper-staticfile 2 slock 2 lru 2 ordnung 2 axum-core 2 traitobject 2 routinator 2 failure 2 oqs 2 bumpalo 2 tower-http 2 nalgebra 2 sha2 2 zeroize_derive 2 pnet 2 simple_asn1 2 array-macro 2 tectonic_xdv 2 vec-const 2 metrics-util 2 rust-embed 2 libp2p-core 2 cache 2 crypto2 2 gfx-auxil 2 futures-task 2 futures-util 2 derive-com-impl 2 columnar 2 binjs_io 2 bronzedb-protocol 2 bite 2 ash 2 image 2 abomonation 2 internment 2 socket2 2 slack-morphism 2 sodiumoxide 2 async-h1 2 unicycle 2 rand_core 2 csv-sniffer 2 simple-slab 2 lettre 2 tar 2 ozone 2 mopa 2 rdiff 2 buffoon 2 molecule 2 evm 2 comrak 2 coreos-installer 2 toodee 2 flumedb 2 actix-http 2 slice-deque 2 openssl 2 nix 2 rocket 2 ruspiro-singleton 2 reorder 2 model 2 v9 2 arenavec 2 syncpool 2 libsecp256k1 2 noise_search 2 toolshed 2 rcu_cell 2 parc 2 scottqueue 2 multiqueue 2 ncurses 2 tiny_future 2 ticketed_lock 2 signal-simple 2 abi_stable 2 stack_dst 2 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.osx-arm64 1 Microsoft.NETCore.App.Runtime.Mono.osx-x64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.win-x64 1 Microsoft.NETCore.App.Runtime.Mono.win-x86 1 Microsoft.NETCore.App.Runtime.linux-arm 1 Microsoft.NETCore.App.Runtime.linux-arm64 1 Microsoft.NETCore.App.Runtime.linux-musl-arm 1 Microsoft.NETCore.App.Runtime.linux-musl-arm64 1 Microsoft.NETCore.App.Runtime.linux-musl-x64 1 Microsoft.NETCore.App.Runtime.linux-x64 1 Microsoft.NETCore.App.Runtime.osx-arm64 1 Microsoft.NETCore.App.Runtime.osx-x64 1 Microsoft.NETCore.App.Runtime.win-arm 1 Microsoft.NETCore.App.Runtime.win-arm64 1 Microsoft.NETCore.App.Runtime.win-x64 1 Microsoft.NETCore.App.Runtime.win-x86 1 wasm3 1 generic-array 1 owning_ref 1 enum-map 1 prettytable-rs 1 async-graphql 1 bat 1 abox 1 mdBook 1 truetype 1 Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64 1 autorand 1 try-mutex 1 magnetic 1 multihash 1 actix-service 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64 1 capnp 1 rkyv 1 juniper 1 totp-rs 1 buttplug 1 arc-swap 1 linked-hash-map 1 Microsoft.NETCore.App.Runtime.Mono.linux-x64 1 Microsoft.NETCore.App.Runtime.Mono.linux-arm64 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64 1 Microsoft.NETCore.App.Runtime.Mono.linux-arm 1 crossbeam-utils 1 iced-x86 1 ripgrep 1 grep-cli 1 bam 1 ordered-float 1 scratchpad 1 mongors 1 algorithmica 1 diesel 1 bunch 1 vm-memory 1 libsecp256k1-rs 1 max7301 1 Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 1 git-delta 1 telemetry 1 stackvector 1 byte_struct 1 bra 1 biscuit-auth 1 com.clever-cloud:biscuit-java 1 github.com/biscuit-auth/biscuit-go 1 pywasm3 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86 1 serde_yaml 1 lz4-sys 1 rmpv 1 beef 1 miow 1 alg_ds 1 async-coap 1 libsbc 1 array-queue 1 convec 1 libp2p-deflate 1 conqueue 1 sys-info 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64 1 chunky 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64 1 lever 1 array-tools 1 disrustor 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64 1 better-macro 1 evm-core 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm64 1 yottadb 1 base64 1 outer_cgi 1 Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64 1 fake-static 1 insert_many 1 uu_od 1 adtensor 1 personnummer 1 Frontier 1 im 1 through 1 nano_arena 1 quinn 1 nb-connect 1 postscript 1 ms3d 1 marc 1 cdr 1 calamine 1 containers 1 glsl-layout 1 lazy-init 1 av-data 1 slice_deque 1 basic_dsp_matrix 1 va-ts 1 multiqueue2 1 eventio 1 may_queue 1 hashconsing 1 rusb 1 conquer-once 1 late-static 1 fil-ocl 1 mio 1 concread 1 thex 1 futures-intrusive 1 pyo3 1 gfwx 1 branca 1 actix-codec 1 dync 1 atom 1 actix-utils 1 stack 1 mozwire 1 crayon 1 Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm 1 Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 1 Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64 1 tendermint-light-client-verifier 1 bigint 1 os_str_bytes 1 bitvec 1 cbox 1 rio 1