Ecosystem
crates.io
2,075 known vulnerabilities.
Most affected packages
2,074 results · Feed
-
High 8.4
Wasmi's Linear Memory has a Critical Use After Free Vulnerability
Wasmi is a WebAssembly interpreter focused on constrained and embedded systems. In versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2 and 1.0.0, Wasmi's linear memory implementation leads to a Use After Free vulnerability, triggered by a We…
-
Low 1.3
matrix-sdk-base is vulnerable to DoS via custom m.room.join_rules event values
matrix-sdk-base is the base component to build a Matrix client library. Versions 0.14.1 and prior are unable to handle responses that include custom m.room.join_rules values due to a serialization bug. This can be exploited to cause a denial-of-service condit…
-
Medium 6.0
nitro-tpm-pcr-compute may allow kernel command line modification by an account operator
## Summary Adding default PCR12 validation to ensure that account operators can not modify kernel command line parameters, potentially bypassing root filesystem integrity validation. Attestable AMIs are based on the systemd Unified Kernel Image (UKI) concept …
-
High —
libcrux incorrectly calculates on aarch64
On platforms without the `core::arch::aarch64::vxarq_u64` intrinsic, an unverified fallback in `libcrux-intrinsics` v0.0.3 passed incorrect arguments and produced wrong results. This corrupted SHA-3 digests and caused `libcrux-ml-kem` and `libcrux-ml-dsa` to …
-
Low —
maxminddb's `Reader::open_mmap` unsoundly marks unsafe memmap operation as safe
maxminddb prior to version 0.27 declared `Reader::open_mmap` as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while …
-
Low —
rtvm-interpreter lacks sufficient checks in public API
The affected function is unsound due to insufficient checks on public struct field.
-
Unscored —
rustls-pemfile is unmaintained
The rustls-pemfile crate is no longer maintained. The repository has been archived since August 2025, and users are encouraged to depend directly on the underlying PEM parsing code included in rustls-pki-types since 1.9.0. The latest version of rustls-pemfile…
-
Critical —
libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)
A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with_page_size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-o…
-
High 8.2
CGGMP21 presignatures can be used in the way that significantly reduces security
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be use…
-
Critical 9.3
CGGMP24 is missing a check in the ZK proof used in CGGMP21
CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which sing…
-
High 8.7
thread-amount is Vulnerable to Resource Exhaustion (Memory and Handle Leaks) on Windows and macOS
thread-amount is a tool that gets the amount of threads in the current process. Prior to version 0.2.2, there are resource leaks when querying thread counts on Windows and Apple platforms. In Windows platforms, the thread_amount function calls CreateToolhelp3…
-
Unscored —
rand_os crate is unmaintained
The `rand_os` crate is deprecated and no longer actively maintained, as `OsRng` is now part of `rand_core`. If you are using this crate, consider upgrading to `rand_core` 0.5.1 or higher.
-
Unscored —
opentelemetry-jaeger crate is unmaintained
The `opentelemetry-jaeger` crate is deprecated and no longer actively maintained. The Jaeger propagator implementation has been migrated to [opentelemetry-jaeger-propagator](https://crates.io/crates/opentelemetry-jaeger-propagator). More information and examp…
-
Unscored —
cargo-asm crate is unmaintained
The `cargo-asm` crate is deprecated and no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. ## Recommended alternatives - [`cargo-show-asm`](https://crates.io/crates/cargo-show-asm)
-
Unscored —
gcc crate is unmaintained
The `gcc` crate is deprecated and no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. ## Recommended alternatives - [`cc`](https://crates.io/crates/cc)
-
Unscored —
number_prefix crate is unmaintained
The `number_prefix` crate is no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. ## Recommended alternatives - [`unit-prefix`](https://crates.io/crates/unit-prefix)
-
Medium 4.4
sudo-rs doesn't record authenticating user properly in timestamp
sudo-rs is a memory safe implementation of sudo and su written in Rust. With `Defaults targetpw` (or `Defaults rootpw`) enabled, the password of the target account (or root account) instead of the invoking user is used for authentication. sudo-rs starting in …
-
Low 1.8
Wasmtime provides unsound API access to a WebAssembly shared linear memory
Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host …
-
Low 3.8
sudo-rs: Partial password reveal is possible after timeout
sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happe…
-
Unscored —
tandem is unmaintained
The tandem crates in [https://github.com/sine-fdn](github.com/sine-fdn) are no longer maintained by the SINE Foundation. The repository has been archived. ## Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party com…
-
Unscored —
tandem_garble_interop is unmaintained
The tandem crates in [https://github.com/sine-fdn](github.com/sine-fdn) are no longer maintained by the SINE Foundation. The repository has been archived. ## Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party com…
-
Unscored —
tandem_http_server is unmaintained
The tandem crates in [https://github.com/sine-fdn](github.com/sine-fdn) are no longer maintained by the SINE Foundation. The repository has been archived. ## Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party com…
-
Unscored —
tandem_http_client is unmaintained
The tandem crates in [https://github.com/sine-fdn](github.com/sine-fdn) are no longer maintained by the SINE Foundation. The repository has been archived. ## Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party com…
-
High 7.5
Apollo Router Improperly Enforces Renamed Access Control Directives
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control dire…
-
High 7.5
Apollo Router Core: Access Control Bypass on Polymorphic Types
Apollo Router Core is a configurable graph router written in Rust to run a federated supergraph using Apollo Federation 2. In versions 1.61.11 below, as well as 2.0.0-alpha.0 through 2.8.1-rc.0, a vulnerability allowed for unauthenticated queries to access da…
-
High 7.3
youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects
Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended pr…
-
High 7.3
youki container escape via "masked path" abuse due to mount race conditions
Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixe…
-
Unscored —
`replit_ruspty` was removed from crates.io for malicious code
The OpenSSF Package Analysis project identified 'replit_ruspty' @ 1.0.0 (crates.io) as malicious. Version 2.0.0 was also published with malware. It is considered malicious because: The package communicates with a domain associated with malicious activity. The…
-
Low —
Shaman has soundness issues and is unmaintained
`shaman::cryptoutil::write_u64v_le` and other functions mentioned above cannot garantee memory safety of get_unchecked later if both length are zero. `shaman` is unmaintained.
-
Low 2.1
Wasmtime vulnerable to segfault when using component resources
Wasmtime is a runtime for WebAssembly. In versions from 38.0.0 to before 38.0.3, the implementation of component-model related host-to-wasm trampolines in Wasmtime contained a bug where it's possible to carefully craft a component, which when called in a spec…
-
Unscored —
Multiple soundness issues in `stackvector`
Affected versions of `stackvector` contained multiple soundness issues that could allow safe Rust code to trigger undefined behavior. One issue was that `StackVec::length` was exposed as a public field. Safe Rust code could set `length` to a value larger than…
-
High —
binary_vec_io access memory out-of-bounds in binary_read_to_ref and binary_write_from_ref
Safe functions accept a single `&T` or `&mut T` but multiply by `n` to create slices extending beyond allocated memory when `n > 1`. These functions use `from_raw_parts` to create slices larger than the underlying allocation, violating memory safety. The bina…
-
Medium —
ncurses exposes uninitialized memory in string reading functions
Multiple string reading functions expose uninitialized memory by setting length to capacity when no null terminator is found. This allows reading uninitialized memory which may contain sensitive data from previous allocations. The ncurses-rs repository is arc…
-
Low —
Borrowck Scarifices exposes uninitialized memory in any_as_u8_slice
The safe function `any_as_u8_slice` can create byte slices that reference uninitialized memory when used with types containing padding bytes. The function uses `slice::from_raw_parts` to create a `&[u8]` covering the entire size of a type, including padding b…
-
Low —
Direct Ring Buffer has uninitialized memory exposure in create_ring_buffer
The safe function `create_ring_buffer` allocates a buffer using `Vec::with_capacity` followed by `set_len`, creating a `Box<[T]>` containing uninitialized memory. This leads to undefined behavior when functions like `write_slices` create typed slices (e.g., `…
-
Low —
orx-pinned-vec has undefined behavior in index_of_ptr with empty slices
The safe function `index_of_ptr` causes undefined behavior when called with an empty slice. The issue occurs in the line `ptr.add(slice.len() - 1)` which underflows when `slice.len()` is 0, creating a pointer with a massive offset. According to Rust's safety …
-
High 8.1CVE-2025-62518 Public exploit
astral-tokio-tar Vulnerable to PAX Header Desynchronization
astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar hea…
-
Unscored —
`unic-ucd-segment` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-core` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-age` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.