Skip to content
OpenAdvisories

Package · Wolfi

bat-doc

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2024-12224

    idna accepts Punycode labels that do not produce any non-ASCII when decoded

    Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to anoth…

    servo rust-url linkerd2-controller linkerd2-tap Debian Ubuntu Alpine Wolfi crates.io
  • Medium 6.5
    CVE-2024-43806

    `rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion

    Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it's possible for the iterator to "get stuck" when an IO error is encountered. Combined with a memory over-allocation issue in `rustix::fs::Di…

    bytecodealliance rustix rust kata-containers Debian Ubuntu Azure Linux Wolfi crates.io