Ecosystem
crates.io
2,075 known vulnerabilities.
Most affected packages
2,074 results · Feed
-
Unscored —
`unic-ucd-common` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-ident` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties) - [`unicode-ident`](https://crates.io/crates/unicode-ident)
-
Unscored —
`unic-ucd-block` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-version` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-idna-mapping` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`idna`](https://crates.io/crates/idna)
-
Unscored —
`unic-bidi` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`unicode-bidi`](https://crates.io/crates/unicode-bidi)
-
Unscored —
`unic` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu`](https://crates.io/crates/icu) - [`idna`](https://crates.io/crates/idna) - [`unicode-bidi`](https://crates.io/crates/unicode-bidi)
-
Unscored —
`unic-ucd-category` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-char-basics` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-case` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-utils` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-emoji-char` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-name_aliases` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-idna-punycode` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`idna`](https://crates.io/crates/idna)
-
Unscored —
`unic-cli` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-char` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-idna` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`idna`](https://crates.io/crates/idna)
-
Unscored —
`unic-emoji` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-bidi` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-normal` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_normalizer`](https://crates.io/crates/icu_normalizer) - [`unicode-normalization`](https://crates.io/crates/unicode-normalization)
-
Unscored —
`unic-char-property` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-common` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-ucd-hangul` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_normalizer`](https://crates.io/crates/icu_normalizer) - [`unicode-normalization`](https://crates.io/crates/unicode-normalization)
-
Unscored —
`unic-ucd-normal` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_normalizer`](https://crates.io/crates/icu_normalizer)
-
Unscored —
`unic-ucd` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_properties`](https://crates.io/crates/icu_properties)
-
Unscored —
`unic-ucd-name` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained.
-
Unscored —
`unic-char-range` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - Since version [1.45.0](https://releases.rs/docs/1.45.0/#libraries) Rust [supports](https://github.com/rust-lang/rust/pull/72413/) using …
-
Unscored —
`unic-segment` is unmaintained
All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. ## Recommended alternatives - [`icu_segmenter`](https://crates.io/crates/icu_segmenter) - [`unicode-segmentation`](https://crates.io/crates/unicode-segmentation)
-
High 7.5
Alloy Core has a DoS vulnerability on `alloy_dyn_abi::TypedData` hashing
Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered by malformed input to alloy_dyn_abi::TypedData could lead to a denial-of-service (DoS) via eip712_signing_hash(). Software with high availa…
-
Low —
tracexec has `env` command argument injection via environment variables starting with dash in traced exec events
### Impact For tracexec's command line reconstruction feature, when a traced process executes another process with a environment variable where the key starts with a dash, tracexec incorrectly shows its commandline where such environment variables could cause…
-
High 8.0
Configuration may unexpectedly disable certificate validation
When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5
-
High 7.5
cel-rust May Panic During Parsing of Invalid CEL Expressions
cel-rust is a Common Expression Language interpreter written in Rust. Starting in version 0.10.0 and prior to version 0.11.4, parsing certain malformed CEL expressions can cause the parser to panic, terminating the process. When the crate is used to evaluate …
-
High —
FuelVM is vulnerable to heap memory allocation re-use bug
### Impact A memory safety vulnerability was present in the Fuel Virtual Machine (FuelVM), where memory reads could bypass expected access controls. Specifically, when a smart contract performed a `mload` (or other opcodes which access memory) on memory that …
-
High 8.1
Deno is Vulnerable to Command Injection on Windows During Batch File Execution
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Versions prior to 2.5.3 and 2.2.15 are vulnerable to Command Line Injection attacks on Windows when batch files are executed. In Windows, ``CreateProcess()`` always implicitly spawns ``cmd.exe`` if a …
-
Low 3.3
Deno's --deny-read check does not prevent permission bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, `Deno.FsFile.prototype.stat` and `Deno.FsFile.prototype.statSync` are not limited by the permission model check `--deny-read=./`. It's possible to retrieve stats…
-
Low 3.3
Deno's --deny-write check does not prevent permission bypass
Deno is a JavaScript, TypeScript, and WebAssembly runtime. In versions prior to 2.5.3 and 2.2.15, `Deno.FsFile.prototype.utime` and `Deno.FsFile.prototype.utimeSync` are not limited by the permission model check `--deny-write=./`. It's possible to change to c…
-
Low 1.0
Wasmtime has memory leak in C API with `externref` and `anyref` types
Wasmtime is a runtime for WebAssembly. Wasmtime 37.0.0 and 37.0.1 have memory leaks in the C/C++ API when using bindings for the `anyref` or `externref` WebAssembly values. This is caused by a regression introduced during the development of 37.0.0 and all pri…
-
Low —
wrflib has a soundness issue and is unmaintained
All functions under `wrflib::byte_extract` are simply wrapper of unsafe pointer offset and lacks sufficient checks to it pointer and offset parameter. `wrflib` is unmaintained.
-
Critical 9.3
risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`
RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sys_read, the host is able to use a crafted response to writ…
-
Medium —
OpenMLS improper persistence of the secret tree during message processing
### Summary A bug in the OpenMLS library prevented private key material from being updated in storage during message processing. The key material in question are the keys stored in the MLS secret tree, which are used for decryption of private MLS messages. Th…