Security advisories

critical2021-08-30

CVE-2021-39167-TimelockController vulnerability in OpenZeppelin Contracts

View chart →

openzeppelin/openzeppelin-contracts · GHSA-fg47-3c2x-m2wr

medium2021-08-30

CVE-2021-39171-Unlimited transforms allowed for signed nodes

View chart →

node-saml/passport-saml · GHSA-5379-r78w-42h2

high2021-08-30

CVE-2021-39174-Cachet configuration leak

View chart →

cachethq/cachet · GHSA-88f9-7xxh-c688

high2021-08-30

CVE-2021-39173-Cachet vulnerable to forced reinstall

View chart →

fiveai/cachet · GHSA-r67m-m8c7-jp83

high2021-08-30

CVE-2021-39172-Cachet vulnerable to new line injection during configuration edition

View chart →

fiveai/cachet · GHSA-9jxw-cfrh-jxq6

medium2021-08-26

CVE-2021-22942-Open Redirect in ActionPack

View chart →

rails/rails · GHSA-2rqw-v265-jf8c

high2021-08-25

CVE-2021-32629-Memory access due to code generation flaw in Cranelift module

View chart →

bytecodealliance/wasmtime · GHSA-hpqh-2wqx-7qp5

high2021-08-25

CVE-2021-36376-Relative Path Traversal in git-delta

View chart →

dandavison/delta · GHSA-5xg3-j2j6-rcx4

high2021-08-25

CVE-2021-36753-Uncontrolled Search Path Element in sharkdp/bat

View chart →

sharkdp/bat · GHSA-p24j-h477-76q3

high2021-08-25

CVE-2020-25574-Integer Overflow/Infinite Loop in the http crate

View chart →

hyperium/http · GHSA-x7vr-c387-8w57

high2021-08-25

CVE-2020-13759-Improper Synchronization and Race Condition in vm-memory

View chart →

rust-vmm/vm-memory · GHSA-mm4m-qg48-f7wc

medium2021-08-25

Partial read is incorrect in molecule

View chart →

nervosnetwork/molecule · GHSA-82hm-vh7g-hrh9

critical2021-08-25

CVE-2021-32810-crossbeam-deque Data Race before v0.7.4 and v0.8.1

View chart →

crossbeam-rs/crossbeam · GHSA-pqqp-xmhj-wgcw

high2021-08-25

CVE-2020-15254-crossbeam-channel Undefined Behavior before v0.4.4

View chart →

crossbeam-rs/crossbeam · GHSA-v5m7-53cv-f3hx

medium2021-08-25

CVE-2020-35900-use-after-free vulnerability in Rust array-queue

View chart →

raviqqe/array-queue · GHSA-75cq-g75g-rxff

medium2021-08-25

CVE-2017-1000168-scalarmult() vulnerable to degenerate public keys

View chart →

sodiumoxide/sodiumoxide · GHSA-2wc6-2rcj-8v76

high2021-08-25

Data races in tiny_future

View chart →

kizzycode/tiny_future · GHSA-m296-j53x-xv95

medium2021-08-25

smallvec creates uninitialized value of any type

View chart →

servo/rust-smallvec · GHSA-66p5-j55p-32r9

high2021-08-25

Slock<T> allows sending non-Send types across thread boundaries

View chart →

brokenlamp/slock-rs · GHSA-83r8-p8v6-6gfm

medium2021-08-25

Uncontrolled recursion leads to abort in deserialization

View chart →

dtolnay/serde-yaml · GHSA-39vw-qp34-rmwf