Skip to content
OpenAdvisories

Package · Wolfi

nushell-plugins

8 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.7

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial p…

  • High 7.3

    zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write

    `zip` is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the `zip` crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlier in the archive are…