Browse CVEs by Ecosystem and Severity
626 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2018-20991
Double free in smallvec
CRITICAL
CVE-2021-3013
OS command injection in ripgrep
CRITICAL
CVE-2021-38189
SMTP command injection in lettre
CRITICAL
CVE-2021-32714
Integer overflow in `hyper`'s parsing of the `Transfer-Encoding` header leads to data loss
HIGH
CVE-2021-32629
Memory access due to code generation flaw in Cranelift module
HIGH
CVE-2021-21299
Multiple Transfer-Encoding headers misinterprets request payload
HIGH
CVE-2020-36463
Queues allow non-Send types to be sent to other threads, allowing data races
HIGH
CVE-2020-36208
conquer-once's OnceCell lacks Send bound for its Sync trait.
HIGH
CVE-2020-36449
ShmWriter allows sending non-Send type across threads
HIGH
CVE-2020-36461
MvccRwLock allows data races & aliasing violations
HIGH
CVE-2020-36438
Future<T> lacks bounds on Send and Sync.
HIGH
CVE-2020-36462
Send bound needed on T (for Send impl of `Bucket2`)
HIGH
CVE-2020-36445
convec::ConVec<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36448
Cache<K>: Send/Sync impls needs trait bounds on `K`
HIGH
CVE-2020-36435
Singleton lacks bounds on Send and Sync.
HIGH
CVE-2020-36453
Queue<T> should have a Send bound on its Send/Sync traits
HIGH
CVE-2020-36450
Bunch<T> unconditionally implements Send/Sync
HIGH
CVE-2020-36441
AtomicBox<T> implements Send/Sync for any `T: Sized`
HIGH
CVE-2020-36442
beef::Cow lacks a Sync bound on its Send trait allowing for data races
HIGH
CVE-2020-35889
Misbehaving `HandleLike` implementation can lead to memory safety violation
HIGH
CVE-2019-15542
Uncontrolled recursion leads to abort in HTML serialization
HIGH
CVE-2018-20999
Flaw in streaming state reset() functions can create incorrect results.
HIGH
CVE-2018-20993
Uncontrolled recursion leads to abort in deserialization
HIGH
CVE-2018-20990
Links in archives can overwrite any existing file
HIGH
CVE-2018-20989
An integer underflow could lead to panic
HIGH
CVE-2017-18589
Large cookie Max-Age values can cause a denial of service