Software
Rust-lang RustRust OS Command Injection/Argument Injection vulnerability
Rust-lang RsaRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels
Rust-lang RustMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
ubuntu/cargoCargo not respecting umask when extracting crate archives
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rust-lang CargoExtracting malicious crates can fill the file system
Rust-lang CargoExtracting malicious crates can corrupt arbitrary files
Fedoraproject FedoraRegular expression denial of service in Rust's regex crate
Fedoraproject FedoraRace condition in std::fs::remove_dir_all in rustlang
Rust-lang Rustlibrary/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero chara…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraIn the standard library in Rust before 1.52.0, there is an optimization for joining strings that can…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rust-lang RustIn the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem.…
Fedoraproject FedoraIn the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It c…
Fedoraproject FedoraInteger Overflow, Buffer Overflow
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rust-lang Future-utilsAn issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead t…
Rust-lang Socket2An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Rust-lang RustCargo prior to Rust 1.26.0 may download the wrong dependency
Fedoraproject FedoraThe Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method whi…
Rust-lang RustInteger Overflow, Buffer Overflow
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.