Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

626 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow

Tauri Filesystem Scope Glob Pattern is too Permissive

Denial of service by double-checked locking in openssl-src

libp2p DoS vulnerability from lack of resource management

Wasmtime may have data leakage between instances in the pooling allocator

Bug in Wasmtime implementation of pooling instance allocator

X.509 Email Address 4-byte Buffer Overflow

X.509 Email Address Variable Length Buffer Overflow

conduit-hyper vulnerable to Denial of Service from unchecked request length

Using a Custom Cipher with `NID_undef` may lead to NULL encryption

Exposure of sensitive Slack webhook URLs in debug logs and traces

WASM3 Improper Input Validation vulnerability

linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

axum-core has no default limit put on request bodies

NLnet Labs Routinator has Reachable Assertion vulnerability

GHSA-9q5j-jm53-v7vr

lz4-sys vulnerable to memory corruption via issue in liblz4

Uncontrolled Resource Consumption in opcua

Apache Avro Rust SDK corrupted data read can cause crash

Apache Avro Rust SDK vulnerable to reader looping in cycle endlessly, consuming CPU

Apache Avro Rust SDK's Reader could consume memory beyond allowed constraints

Rust-WebSocket memory allocation based on untrusted length

`libsqlite3-sys` via C SQLite improperly validates array index

Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs

openssl-src heap memory corruption with RSA private key operation

Signature forgery in Biscuit

GHSA-x4mq-m75f-mx8m

Delegate functions are missing `Send` bound

GHSA-3jch-9qgp-4844

Generated code can read and write out of bounds in safe code

Type confusion if __private_get_type_id__ is overriden

Link Following in Deno

SM2 Decryption Buffer Overflow

Read buffer overruns processing ASN.1 strings

Fix a use-after-free bug in diesels Sqlite backend

move_elements can double-free objects on panic

Loading a bgzip block can write out of bounds if size overflows.

Buffer overflow in SmallVec::insert_many

futures_task::waker may cause a use-after-free if used on a type that isn't 'static

Dangling reference in `access::Map` with Constant

Integer overflow in the bundled Brotli C library

Cargo prior to Rust 1.26.0 may download the wrong dependency

Incorrect Calculation in solana_rbpf

Resource leakage when decoding certificates and keys

Insecure temporary file usage in SWHKD

Use after free in Wasmtime

Insecure Temporary File in SWHKD

Sandbox bypass leading to arbitrary code execution in Deno

openssl-src's infinite loop in `BN_mod_sqrt()` reachable when parsing certificates

Rust's regex crate vulnerable to regular expression denial of service

crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64

Scan your dependencies for these CVEs