Skip to content
OpenAdvisories

Package · Wolfi

cargo-audit

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-25541 Public exploit

    Bytes is vulnerable to integer overflow in BytesMut::reserve

    Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an un…

    tokio-rs bytes rust kata-containers Debian Ubuntu Azure Linux Wolfi crates.io
  • Medium 5.0
    CVE-2025-22620 Public exploit

    gix-worktree-state nonexclusive checkout sets executable files world-writable

    gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permis…

    GitoxideLabs gitoxide cargo-audit gix-worktree-state Debian Wolfi crates.io