Skip to content
Fencer Intel

All · crates.io

Newest first, late arrivals on top. Also a feed.

  1. —
    RUSTSEC-2023-0026 Gitoxide has renamed its crates.
    crates.io
  2. —
    RUSTSEC-2023-0025 Gitoxide has renamed its crates.
    crates.io
  3. —
    RUSTSEC-2023-0020 const-cstr is Unmaintained
    crates.io
  4. —
    GHSA-wm8x-php5-hvq6 Maligned causes incorrect deallocation
    crates.io
  5. 3.1
    CVE-2023-27477 wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64
    crates.io
  6. 10.0
    CVE-2023-26489 Guest-controlled out-of-bounds read/write on x86_64 in wasmtime
    crates.io
    EPSS 1.3% chance of exploitation in 30 days, percentile 69%
  7. —
    GHSA-mrrw-grhq-86gf Ascii (crate) allows out-of-bounds array indexing in safe code
    crates.io
  8. 5.3
    CVE-2023-26103 Regular Expression Denial of Service in Deno.upgradeWebSocket API
    crates.iojulia
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  9. —
    GHSA-mc8h-8q98-g5hr Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
    crates.io
  10. —
    RUSTSEC-2023-0043 ftp is unmaintained, use suppaftp instead
    crates.io
  11. —
    GHSA-5x36-7567-3cw6 partial_sort contains Out-of-bounds Read in release mode
    crates.io
  12. —
    RUSTSEC-2023-0081 safemem is unmaintained
    crates.io
  13. —
    GHSA-xw5j-gv2g-mjm2 Miscompilation in cortex-m-rt 0.7.1 and 0.7.2
    crates.io
  14. —
    GHSA-qf87-q4gg-cg43 bottlerocket dependency openssl is vulnerable to dereferenced null pointers
    crates.io
  15. —
    GHSA-j859-pmrq-9q6c bottlerocket dependency openssl has a double free vulnerability
    crates.io
  16. —
    GHSA-3wxx-jxwc-mg39 bottlerocket dependency openssl has a double free vulnerability
    crates.io
  17. —
    GHSA-pj34-fpw3-83qj bottlerocket dependency openssl is vulnerable to read buffer overflow via X.509 verification
    crates.io
  18. —
    GHSA-j79x-vvgm-w73w bottlerocket dependency openssl provides streaming of ASN.1 data via a BIO
    crates.io
  19. —
    GHSA-p2gm-ffr3-w2xw Nervos CKB vulnerable to low-resource flood DDoS attacks through network message
    crates.io
  20. —
    GHSA-fjj4-2q73-jvgc Nervos CKB calculation of program load cycles may be missed when executing in resume mode
    crates.io
  21. 7.5
    CVE-2023-0401 NULL dereference during PKCS7 data verification
    OpenSSLcrates.io
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  22. 7.4
    CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
    OpenSSLpypicrates.iojulia
    EPSS 68.4% chance of exploitation in 30 days, percentile 99.3%
  23. 7.5
    CVE-2023-0217 NULL dereference validating DSA public key
    OpenSSLcrates.io
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  24. 7.5
    CVE-2023-0216 Invalid pointer dereference in d2i_PKCS7 functions
    OpenSSLcrates.io
    EPSS 1.8% chance of exploitation in 30 days, percentile 79%
  25. 7.5
    CVE-2023-0215 Use-after-free following BIO_new_NDEF
    OpenSSLcrates.iojulia
    EPSS 5.0% chance of exploitation in 30 days, percentile 92%
  26. 7.5
    CVE-2022-4450 Double free after calling PEM_read_bio_ex
    OpenSSLcrates.iojulia
    EPSS 28.6% chance of exploitation in 30 days, percentile 98%
  27. 5.9
    CVE-2022-4304 Timing Oracle in RSA Decryption
    OpenSSLcrates.iojulia
    EPSS 23.5% chance of exploitation in 30 days, percentile 97%
  28. 4.9
    CVE-2022-4203 X.509 Name Constraints Read Buffer Overflow
    OpenSSLcrates.io
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  29. —
    RUSTSEC-2023-0126 Aliasing violation in `OrdSet` insertion
    crates.io
  30. —
    RUSTSEC-2023-0028 buf_redux is Unmaintained
    crates.io