Tagged “rust”
CVEs tagged rust, newest first.
740 CVEsRSS
CVE-2024-47813Low· 2.9Race condition could lead to WebAssembly control-flow integrity and type safety violations
Race condition could lead to WebAssembly control-flow integrity and type safety violations
CVE-2024-47763Medium· 5.5Runtime crash when combining tail calls with stack traces
Runtime crash when combining tail calls with stack traces
CVE-2024-47609NoneRemotely exploitable Denial of Service in Tonic
Remotely exploitable Denial of Service in Tonic
RUSTSEC-2024-0404NoneUnsoundness in anstream
Unsoundness in anstream
CVE-2024-45405Medium· 6.0gix-path improperly resolves configuration path reported by Git
gix-path improperly resolves configuration path reported by Git
CVE-2024-45305Low· 2.5gix-path uses local config across repos when it is the highest scope
gix-path uses local config across repos when it is the highest scope
CVE-2024-43785Low· 2.5gitoxide-core does not neutralize special characters for terminals
gitoxide-core does not neutralize special characters for terminals
CVE-2024-43367High· 8.6Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`
Uncaught exception when transitioning the state of `AsyncGenerator` objects from within a property getter of `then`
CVE-2024-41815High· 7.4Shell expansion in custom commands
Shell expansion in custom commands
CVE-2024-40648None`UserIdentity::is_verified` not checking verification status of own user identity while performing the check
`UserIdentity::is_verified` not checking verification status of own user identity while performing the check
CVE-2024-40644Medium· 6.8gix-path can use a fake program files location
gix-path can use a fake program files location
CVE-2024-40640NoneUsage of non-constant time base64 decoder could lead to leakage of secret key material
Usage of non-constant time base64 decoder could lead to leakage of secret key material
CVE-2024-39697High· 8.6phonenumber: panic on parsing crafted phonenumber inputs
phonenumber: panic on parsing crafted phonenumber inputs
CVE-2024-35197Medium· 5.4Refs and paths with reserved Windows device names access the devices
Refs and paths with reserved Windows device names access the devices
CVE-2024-35186High· 8.8Traversal outside working tree enables arbitrary code execution
Traversal outside working tree enables arbitrary code execution
CVE-2024-34063NoneDegraded secret zeroization capabilities
Degraded secret zeroization capabilities
CVE-2024-32650High· 7.5`rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input
`rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input
CVE-2024-32884Nonegix-transport indirect code execution via malicious username
gix-transport indirect code execution via malicious username
CVE-2024-30266Low· 3.3Panic when using a dropped extenref-typed element segment
Panic when using a dropped extenref-typed element segment
CVE-2024-29640Highaliyundrive-webdav vulnerable to Command Injection
aliyundrive-webdav vulnerable to Command Injection
RUSTSEC-2024-0449Noneunsafe-libyaml is unmaintained
unsafe-libyaml is unmaintained
CVE-2024-28854High· 7.5Slow loris vulnerability with default configuration
Slow loris vulnerability with default configuration
CVE-2024-1410Low· 3.7quiche vulnerable to unbounded storage of information related to connection ID retirement
quiche vulnerable to unbounded storage of information related to connection ID retirement
CVE-2024-1765Medium· 5.9quiche vulnerable to unlimited resource allocation by QUIC CRYPTO frames flooding
quiche vulnerable to unlimited resource allocation by QUIC CRYPTO frames flooding
CVE-2024-27308NoneTokens for named pipes may be delivered after deregistration
Tokens for named pipes may be delivered after deregistration
CVE-2024-27284NoneNon-idiomatic use of iterators leads to use after free
Non-idiomatic use of iterators leads to use after free
CVE-2021-29511Medium· 6.5Memory over-allocation in evm crate
Memory over-allocation in evm crate
CVE-2024-58265NoneUnauthenticated Nonce Increment in snow
Unauthenticated Nonce Increment in snow
CVE-2024-23644NoneImproper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
CVE-2024-58266NoneMultiple issues involving quote API
Multiple issues involving quote API