Security advisories

high2022-06-17

`mopa` is technically unsound

View chart →

chris-morgan/mopa · GHSA-8mv5-7x95-7wcf

high2022-06-17

Deserialization functions pass uninitialized memory to user-provided Read

View chart →

otake84/messagepack-rs · GHSA-m325-rxjv-pwph

high2022-06-17

Use after free in lru crate

View chart →

jeromefroe/lru-rs · GHSA-qqmc-hwqp-8g2w

critical2022-06-17

CVE-2021-41411-XML External Entity Reference in drools

View chart →

kiegroup/drools · GHSA-rc57-9r3x-98cq

high2022-06-17

CVE-2020-28865-Insufficiently Protected Credentials in PowerJob

View chart →

powerjob/powerjob · GHSA-w4q4-jcm7-g4m6

medium2022-06-17

CVE-2021-33295-Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags

View chart →

laurent22/joplin · GHSA-phj8-2p6x-hq5r

high2022-06-17

Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`

View chart →

libp2p/rust-libp2p · GHSA-wc36-xgcc-jwpr

high2022-06-16

Parser creates invalid uninitialized value

View chart →

hyperium/hyper · GHSA-f67m-9j94-qv9j

high2022-06-16

Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )

View chart →

gfx-rs/gfx · GHSA-28p5-7rg4-8v99

high2022-06-16

`Read` on uninitialized buffer may cause UB ( `read_entry()` )

View chart →

sunrise-choir/flumedb-rs · GHSA-p56p-gq3f-whg8

critical2022-06-16

Generated code can read and write out of bounds in safe code

View chart →

google/flatbuffers · GHSA-3jch-9qgp-4844

high2022-06-16

enum_map macro can cause UB when `Enum` trait is incorrectly implemented

View chart →

xfix/enum-map · GHSA-rxhx-9fj6-6h2m

medium2022-06-16

QueryInterface should call AddRef before returning pointer

View chart →

connicpu/com-impl · GHSA-9rg7-3j4f-cf4x

high2022-06-16

Unsoundness in `dashmap` references

View chart →

xacrimon/dashmap · GHSA-mpg5-fvwp-42m2

high2022-06-16

Non-aligned u32 read in Chacha20 encryption and decryption

View chart →

shadowsocks/crypto2 · GHSA-pmcv-mgcf-rvxg

medium2022-06-16

`SegQueue` creates zero value of any type

View chart →

crossbeam-rs/crossbeam · GHSA-8gj8-hv75-gp94

medium2022-06-16

`SegQueue` creates zero value of any type

View chart →

crossbeam-rs/crossbeam · GHSA-6888-wf7j-34jq

high2022-06-16

Channel creates zero value of any type

View chart →

crossbeam-rs/crossbeam · GHSA-9g55-pg62-m8hh

high2022-06-16

columnar: `Read` on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())

View chart →

frankmcsherry/columnar · GHSA-cxcc-q839-2cw9

high2022-06-16

InputStream::read_exact : `Read` on uninitialized buffer causes UB

View chart →

carllerche/buffoon · GHSA-hmx9-jm3v-33hv