Skip to content
OpenAdvisories

Package · Wolfi

wash

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-31812

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial p…

    quinn-rs quinn zed wasmcloud Debian Ubuntu Wolfi crates.io
  • High 8.1
    CVE-2025-62518 Public exploit

    astral-tokio-tar Vulnerable to PAX Header Desynchronization

    astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar hea…

    astral-sh tokio-tar wash pixi Debian Ubuntu Wolfi crates.io
  • High 7.5
    CVE-2024-45311

    Denial of service in quinn-proto when using `Endpoint::retry()`

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. As of quinn-proto 0.11, it is possible for a server to `accept()`, `retry()`, `refuse()`, or `ignore()` an `Incoming` connection. However, calling `retry()` on an unval…

    quinn-rs quinn wasmcloud wash Wolfi crates.io