Vulnerability Library

ID
Packages
Summary
Affected versions
Last modified
Fix
GHSA-8v4j-7jgf-5rg9
  • crates.io/warp
Warp vulnerable to Path Traversal via Improper validation of Windows paths
  • See details.
2023-03-31T00:06:08Z Fix available
GHSA-p9gf-gmfv-398m
  • crates.io/slice-deque
Double free in slice-deque
  • See details.
2023-03-30T23:01:08Z No fix available
GHSA-5r3x-p7xx-x6q5
  • crates.io/comrak
Comrak AST node data is not validated (GHSL-2023-049)
  • See details.
2023-03-28T23:08:47Z Fix available
GHSA-8hqf-xjwp-p67v
  • crates.io/comrak
Comrak vulnerable to quadratic runtime issues when parsing Markdown (GHSL-2023-047)
  • See details.
2023-03-28T23:08:31Z Fix available
GHSA-fcmm-54jp-7vf6
  • crates.io/frontier
Frontier's modexp precompile is slow for even modulus
  • See details.
2023-03-28T18:58:12Z No fix available
GHSA-xxmq-4vph-956w
  • crates.io/comrak
Comrak vulnerable to production of excessive output when parsing Markdown (GHSL-2023-048)
  • See details.
2023-03-28T14:44:04Z Fix available
GHSA-75rw-34q6-72cr
  • crates.io/biscuit-auth
  • Go/github.com/biscuit-auth/biscuit-go
  • Maven/com.clever-cloud:biscuit-java
Signature forgery in Biscuit
  • 0.2.1
  • 0.2.2
  • 0.2.3
  • 0.2.4
  • 0.2.5
  • 0.2.6
  • 0.2.7
  • ...
2023-03-28T05:43:38.870519Z Fix available
GHSA-5v8v-66v8-mwm7
  • crates.io/compu-brotli-sys
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.browser-wasm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-x64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.android-x86
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.linux-x64.Cross.browser-wasm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.android-x86
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.browser-wasm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.ios-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.iossimulator-x86
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.maccatalyst-x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvos-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.osx-x64.Cross.tvossimulator-x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.android-x86.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm
  • NuGet/Microsoft.NETCore.App.Runtime.AOT.win-x64.Cross.browser-wasm.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.AOT.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.LLVM.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.android-x86.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.browser-wasm
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.browser-wasm.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.ios-arm64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-arm64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-musl-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-arm64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.osx-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-arm64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.arm64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.tvossimulator-x64.Msi.x86
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.Mono.win-x86
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-musl-x64
  • NuGet/Microsoft.NETCore.App.Runtime.linux-x64
  • NuGet/Microsoft.NETCore.App.Runtime.osx-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.osx-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm
  • NuGet/Microsoft.NETCore.App.Runtime.win-arm64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x64
  • NuGet/Microsoft.NETCore.App.Runtime.win-x86
Integer overflow in the bundled Brotli C library
  • 3.0.0
  • 3.0.1
  • 3.0.2
  • 3.0.3
  • 3.1.0
  • 3.1.1
  • 3.1.10
  • ...
2023-03-28T05:36:45.029311Z Fix available
GHSA-x4qr-2fvf-3mr5
  • PyPI/cryptography
  • crates.io/openssl-src
  • crates.io/openssl-src
Vulnerable OpenSSL included in cryptography wheels
  • 0.8.1
  • 0.8.2
  • 0.9
  • 0.9.1
  • 0.9.2
  • 0.9.3
  • 1.0
  • ...
2023-03-28T05:34:05.380800Z Fix available
GHSA-crf8-h2wq-2h9x
  • PyPI/pywasm3
  • crates.io/wasm3
WASM3 Improper Input Validation vulnerability
  • 0.0.1
  • 0.0.2
  • 0.4.8
  • 0.4.9
  • 0.5.0
2023-03-28T05:22:57.464596Z No fix available
GHSA-wvc4-j7g5-4f79
  • crates.io/nats
NATS TLS certificate common name validation bypass
  • See details.
2023-03-27T21:12:24Z No fix available
RUSTSEC-2023-0030
  • crates.io/versionize
`Versionize::deserialize` implementation for `FamStructWrapper<T>` is lacking bound checks, potentially leading to out of bounds memory accesses
  • See details.
2023-03-25T12:18:50Z Fix available
RUSTSEC-2023-0029
  • crates.io/nats
TLS certificate common name validation bypass
  • See details.
2023-03-25T11:37:35Z No fix available
GHSA-vq67-rp93-65qf
  • crates.io/deno_runtime
  • crates.io/deno
Interactive `run` permission prompt spoofing via improper ANSI neutralization
  • See details.
2023-03-24T22:06:01Z Fix available
GHSA-3gxf-9r58-2ghg
  • crates.io/openssl
`openssl` `X509NameBuilder::build` returned object is not thread safe
  • See details.
2023-03-24T22:01:35Z Fix available
GHSA-9qwg-crg9-m2vc
  • crates.io/openssl
`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read
  • See details.
2023-03-24T22:01:29Z Fix available