An open API service providing security vulnerability metadata for many open source software ecosystems.

cargo

cargo

207,900 packages · crates.io

Low
about 2 months ago

RISC Zero Underconstrained Vulnerability: Division GSA_kwCzR0hTQS1mNnJjLTI0eDQtcHB4cM4ABKyE

cargo risc0-circuit-rv32im-sys, risc0-circuit-rv32im, risc0-zkvm
Low
3 months ago

zkVM Underconstrained Vulnerability GSA_kwCzR0hTQS1nM3FnLTY3NDYtM21nOc4ABJUj

cargo risc0-circuit-rv32im, risc0-zkvm
Moderate
6 months ago

gitoxide does not detect SHA-1 collision attacks GSA_kwCzR0hTQS0yZnJ4LTI1OTYteDVyNs4ABGbF

cargo gix-worktree-state, gix-worktree, gix-traverse, gix-status, gix-revwalk, gix-revision, gix-ref, gix-protocol, gix-negotiate, gix-merge, gix-fsck, gix-filter, gix-discover, gix-dir, gix-diff, gix-config, gix-blame, gix-archive, gix, gitoxide-core, gitoxide, gix-pack, gix-odb, gix-object, gix-index, gix-commitgraph, gix-features
Critical
6 months ago

Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell` GSA_kwCzR0hTQS1jOXByLXE4Z3gtM21ncM4ABGV9

npm, cargo @tauri-apps/plugin-shell, tauri-plugin-shell

Filter by Severity

Filter by Package

openssl-src 25 surrealdb 24 ckb 22 wasmtime 20 deno 19 rusqlite 16 openssl 10 apollo-router 10 surrealdb-core 8 tough 8 hyper 7 libpulse-binding 7 smallvec 6 Simple-Wayland-HotKey-Daemon 6 cargo 6 sized-chunks 6 xcb 6 matrix-sdk-crypto 5 bottlerocket/update-operator 5 deno_runtime 5 comrak 5 cosmwasm-vm 5 cranelift-codegen 5 gitoxide 5 lock_api 5 tauri 5 tokio 5 messagepack-rs 5 quiche 4 github.com/CosmWasm/wasmvm 4 gix-worktree-state 4 actix-web 4 pleaser 4 ntpd 4 slice-deque 4 gix 4 crossbeam-channel 4 russh 4 pyo3 4 ammonia 4 tremor-script 4 evm 4 raw-cpuid 4 gitoxide-core 4 github.com/CosmWasm/wasmvm/v2 4 id-map 4 vaultwarden 3 wasm3 3 anoncreds-clsignatures 3 apache-avro 3 routinator 3 flatbuffers 3 pywasm3 3 ursa 3 sudo-rs 3 nanorand 3 wasmtime 3 risc0-zkvm 3 pallet-ethereum 3 s2n-quic 3 arenavec 3 namada-apps 3 gix-worktree 3 arrow 3 cgc 3 solana_rbpf 3 gix-path 3 fltk 3 s2n-tls 3 grin 3 crossbeam 3 acc_reader 3 toodee 3 h2 3 arr 3 gix-index 3 users 2 tar 2 multiqueue 2 gfx-auxil 2 cache 2 futures-util 2 ouch 2 bite 2 crayon 2 rand_core 2 ticketed_lock 2 sha2 2 v9 2 internment 2 async-graphql 2 bumpalo 2 streebog 2 simple-slab 2 diesel 2 derive-com-impl 2 parc 2 flumedb 2 tiny_future 2 mopa 2 hickory-proto 2 ash 2 sequoia-openpgp 2 array-macro 2 actix-http 2 libp2p-core 2 scratchpad 2 abi_stable 2 phonenumber 2 pnet 2 ring 2 web-push 2 tor-circmgr 2 pallet-evm-precompile-modexp 2 spin 2 reorder 2 crypto2 2 rocket 2 oqs 2 ordnung 2 syncpool 2 vec-const 2 csv-sniffer 2 simple_asn1 2 ozone 2 trust-dns-server 2 coreos-installer 2 tectonic_xdv 2 pingora-core 2 vm-memory 2 risc0-circuit-rv32im 2 stack_dst 2 deno_node 2 nano-id 2 binjs_io 2 nix 2 buffoon 2 matrix-sdk 2 slock 2 async-h1 2 futures-task 2 bronzedb-protocol 2 libsecp256k1 2 rdiff 2 gix-transport 2 zerocopy 2 tower-http 2 cocoon 2 molecule 2 evm-core 2 http 2 columnar 2 failure 2 biscuit-auth 2 pgp 2 ncurses 2 net2 2 metrics-util 2 abomonation 2 slack-morphism 2 vodozemac 2 arti 2 generator 2 quinn-proto 2 libgit2-sys 2 rulex 2 lemmy_server 2 lettre 2 Deno 2 memoffset 2 svix 2 fast-float 2 arrow2 2 lru 2 signal-simple 2 sodiumoxide 2 tendermint-light-client-verifier 2 rust-embed 2 mio 2 array-queue 2 protobuf 2 opcua 2 traitobject 2 hyper-staticfile 2 rustls 2 inventory 2 rsa 2 image 2 gix-ref 2 jj-lib 2 nats 1 libp2p 1 actix-utils 1 libdav1d-sys 1 gix-fs 1 rocksdb 1 bra 1 trillium-http 1 temporary 1 rustyscript 1

Filter by Repository

https://github.com/surrealdb/surrealdb 25 https://github.com/denoland/deno 22 https://github.com/nervosnetwork/ckb 22 https://github.com/bytecodealliance/wasmtime 21 https://github.com/rusqlite/rusqlite 16 https://github.com/sfackler/rust-openssl 10 https://github.com/crossbeam-rs/crossbeam 9 https://github.com/apollographql/router 9 https://github.com/matrix-org/matrix-rust-sdk 8 https://github.com/awslabs/tough 8 https://github.com/hyperium/hyper 8 https://github.com/Byron/gitoxide 8 https://github.com/tauri-apps/tauri 7 https://github.com/jnqnfe/pulse-binding-rust 6 https://github.com/actix/actix-web 6 https://github.com/waycrate/swhkd 6 https://github.com/servo/rust-smallvec 6 https://github.com/paritytech/frontier 6 https://github.com/bodil/sized-chunks 6 https://github.com/pendulum-project/ntpd-rs 5 https://github.com/Amanieu/parking_lot 5 https://github.com/tokio-rs/tokio 5 https://github.com/bottlerocket-os/bottlerocket-update-operator 5 https://github.com/kivikakk/comrak 5 https://github.com/rust-lang/cargo 5 https://github.com/otake84/messagepack-rs 5 https://github.com/cloudflare/quiche 4 https://github.com/rust-lang/futures-rs 4 https://gitlab.com/edneville/please 4 https://github.com/RustCrypto/hashes 4 https://github.com/apache/arrow-rs 4 https://github.com/rust-blockchain/evm 4 https://github.com/CosmWasm/wasmvm 4 https://github.com/tremor-rs/tremor-runtime 4 https://github.com/andrewhickman/id-map 4 https://github.com/gz/rust-cpuid 4 https://github.com/rust-ammonia/ammonia 4 https://github.com/PyO3/pyo3 4 https://github.com/quinn-rs/quinn 3 https://github.com/actix/actix-net 3 https://gitlab.com/sequoia-pgp/sequoia 3 https://github.com/aws/s2n-quic 3 https://github.com/LemmyNet/lemmy 3 https://github.com/aws/s2n-tls 3 https://github.com/hyperledger-archives/ursa 3 https://github.com/gnzlbg/slice_deque 3 https://github.com/risc0/risc0 3 https://github.com/MoAlyousef/fltk-rs 3 https://github.com/sjep/array 3 https://github.com/aldanor/fast-float-rust 3 https://github.com/google/flatbuffers 3 https://github.com/playXE/cgc 3 https://github.com/paritytech/libsecp256k1 3 https://github.com/ibabushkin/arenavec 3 https://github.com/dani-garcia/vaultwarden 3 https://github.com/wasm3/wasm3 3 https://github.com/anoma/namada 3 https://github.com/antonmarsden/toodee 3 https://github.com/GitoxideLabs/gitoxide 3 https://github.com/netvl/acc_reader 3 https://github.com/Absolucy/nanorand-rs 3 https://github.com/github/advisory-database 3 https://github.com/succinctlabs/sp1 3 https://github.com/libpnet/libpnet 3 https://github.com/rust-x-bindings/rust-xcb 2 https://github.com/matrix-org/vodozemac 2 https://github.com/tiby312/reorder 2 https://github.com/Xudong-Huang/generator-rs 2 https://github.com/stepancheg/rust-protobuf 2 https://github.com/locka99/opcua 2 https://github.com/openssl/openssl 2 https://github.com/solana-labs/rbpf 2 https://github.com/tower-rs/tower-http 2 https://github.com/maciejhirsz/ordnung 2 https://github.com/rust-vmm/vm-memory 2 https://github.com/rustls/rustls 2 https://github.com/purpleposeidon/v9 2 https://github.com/shawnscode/crayon 2 https://github.com/bytecodealliance/lucet 2 https://github.com/fadeevab/cocoon 2 https://github.com/SergioBenitez/Rocket 2 https://github.com/metrics-rs/metrics 2 https://github.com/carllerche/buffoon 2 https://github.com/tectonic-typesetting/tectonic 2 https://github.com/ouch-org/ouch 2 https://github.com/reem/rust-traitobject 2 https://github.com/tokio-rs/tracing 2 https://github.com/fitzgen/bumpalo 2 https://github.com/alexcrichton/tar-rs 2 https://github.com/binast/binjs-ref 2 https://github.com/KizzyCode/tiny_future 2 https://github.com/NLnetLabs/routinator 2 https://github.com/coreos/coreos-installer 2 https://github.com/open-quantum-safe/liboqs-rust 2 https://github.com/3Hren/msgpack-rust 2 https://github.com/droundy/internment 2 https://github.com/frankmcsherry/columnar 2 https://github.com/async-graphql/async-graphql 2 https://github.com/mvdnes/spin-rs 2 https://github.com/rust-random/rand 2 https://github.com/pimeys/rust-web-push 2 https://github.com/sunrise-choir/flumedb-rs 2 https://github.com/nathansizemore/simple-slab 2 https://github.com/BrokenLamp/slock-rs 2 https://github.com/dtolnay/inventory 2 https://github.com/ogham/rust-users 2 https://github.com/google/zerocopy 2 https://github.com/gfx-rs/gfx 2 https://github.com/stephank/hyper-staticfile 2 https://github.com/RustCrypto/RSA 2 https://github.com/whisperfish/rust-phonenumber 2 https://github.com/Eugeny/russh 2 https://github.com/informalsystems/tendermint-rs 2 https://github.com/metaplex-foundation/metaplex-program-library 2 https://github.com/image-rs/image 2 https://github.com/warp-tech/russh 2 https://github.com/rust-lang/rust 2 https://github.com/abdolence/slack-morphism-rust 2 https://github.com/tokio-rs/mio 2 https://github.com/pyros2097/rust-embed 2 https://github.com/krl/cache 2 https://github.com/lettre/lettre 2 https://github.com/bluejekyll/trust-dns 2 https://github.com/trifectatechfoundation/sudo-rs 2 https://github.com/Connicpu/com-impl 2 https://github.com/schets/multiqueue 2 https://github.com/rust-lang-nursery/failure 2 https://github.com/Chopinsky/byte_buffer 2 https://github.com/CosmWasm/cosmwasm 2 https://github.com/http-rs/async-h1 2 https://github.com/alexcrichton/openssl-src-rs 2 https://github.com/shadowsocks/crypto2 2 https://github.com/rpgp/rpgp 2 https://github.com/RustCrypto/AEADs 2 https://github.com/svix/svix-webhooks 2 https://github.com/cloudflare/pingora 2 https://github.com/thepowersgang/stack_dst-rs 2 https://github.com/viz-rs/nano-id 2 https://github.com/diesel-rs/diesel 2 https://github.com/nervosnetwork/molecule 2 https://github.com/hyyking/rustracts 2 https://github.com/jeaye/ncurses-rs 2 https://github.com/Alexhuszagh/rust-lexical 2 https://github.com/mimblewimble/grin-security 2 https://github.com/jblondin/csv-sniffer 2 https://github.com/dyule/rdiff 2 https://github.com/raviqqe/array-queue 2 https://github.com/jeromefroe/lru-rs 2 https://github.com/kitsuneninetails/signal-rust 2 https://github.com/dfns/cggmp21 2 https://github.com/okready/scratchpad 2 https://github.com/hickory-dns/hickory-dns 2 https://github.com/Eolu/vec-const 2 https://github.com/acw/simple_asn1 2 https://github.com/wasmerio/wasmer 2 https://github.com/nix-rust/nix 2 https://github.com/rodrimati1992/abi_stable_crates 2 https://github.com/hinaria/bite 2 https://github.com/chris-morgan/mopa 2 https://github.com/nats-io/nats.rs 2 https://github.com/Gilnaa/memoffset 2 https://github.com/Hexilee/BronzeDB 2 https://github.com/TimelyDataflow/abomonation 2 https://github.com/briansmith/ring 2 https://github.com/rulex-rs/rulex 2 https://github.com/kvark/ticketed_lock 2 https://github.com/Matthias247/futures-intrusive 1 https://github.com/tiny-http/tiny-http 1 https://github.com/oliver-giersch/conquer-once 1 https://github.com/rust-av/rust-av 1 https://github.com/chyh1990/yaml-rust 1 https://github.com/smol-rs/nb-connect 1 https://github.com/zip-rs/zip2 1 https://github.com/input-output-hk/mithril 1 https://github.com/nabijaczleweli/safe-transmute-rs 1 https://github.com/kamadak/exif-rs 1 https://github.com/solana-labs/solana-program-library 1 https://github.com/time-rs/time 1 https://github.com/Ainevsia/CVE-Request 1 https://github.com/wasmi-labs/wasmi 1 https://github.com/stainless-steel/temporary 1 https://github.com/RustyYato/cell-project 1 https://github.com/badboy/lzf-rs 1 https://github.com/not-fl3/macroquad 1 https://github.com/raycar5/better-macro 1 https://github.com/llogiq/compact_arena 1 https://github.com/tokio-rs/prost 1 https://github.com/NLnetLabs/bcder 1 https://github.com/jorgecarleitao/arrow2 1 https://github.com/sile/libflate 1 https://github.com/Xudong-Huang/may 1 https://github.com/Richard-W/late-static 1 https://github.com/ZcashFoundation/frost 1 https://github.com/FractalFir/memory_pages 1 https://github.com/yoshuawuyts/miow 1 https://gitlab.com/myrrlyn/endian_trait 1 https://github.com/reem/rust-typemap 1 https://github.com/motoras/kekbit 1 https://github.com/dylni/os_str_bytes 1