cargo vulnerabilities (Red Hat)
58 vulnerabilities.
-
cargoRed Hat HTTP/2 upload Use-After-Free 8.1 High -
cargoRed Hat Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count 7.1 High -
cargoRed Hat Gitoxide gix-pack before 0.75.0 Denial of Service via OFS_DELTA Base Distance 7.1 High -
cargoRed Hat gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header 7.1 High -
cargoRed Hat Negotiate ambient user conn reuse 9.8 Critical -
cargoRed Hat HTTP/2 server push UAF 9.1 Critical -
cargoRed Hat OpenLDAP SASL authentication bypass 7.4 High -
cargoRed Hat libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data 7.5 High -
cargoRed Hat js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
cargoRed Hat enquirer Public Package API Enquirer.set prototype pollution 5.3 Medium -
cargoRed Hat HdrHistogram Range Check DoubleHistogram.java org.HdrHistogram.DoubleHistogram.recordValue comparison 4.8 Medium -
cargoRed Hat HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issue 4.8 Medium -
cargoRed Hat HdrHistogram AbstractHistogram.java memory allocation 4.8 Medium -
cargoRed Hat HdrHistogram AbstractHistogram.java memory allocation 4.8 Medium -
cargoRed Hat RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set 2.0 Low -
cargoRed Hat ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state,... 7.5 High -
cargoRed Hat linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop 8.7 High -
cargoRed Hat SSH improper host validation 7.4 High -
cargoRed Hat sending old referer 7.5 High -
cargoRed Hat UAF after pause in socket callback 7.3 High -
cargoRed Hat stale proxy password leak 9.8 Critical -
cargoRed Hat incomplete mTLS config matching in conn reuse 7.5 High -
cargoRed Hat env-set cross-proxy Digest auth state leak 9.1 Critical -
cargoRed Hat password leak with netrc and user in URL 9.1 Critical -
cargoRed Hat SASL double-free 9.8 Critical -
cargoRed Hat trailing dot domain super cookie 9.1 Critical -
cargoRed Hat wrong reuse for different services 6.5 Medium -
cargoRed Hat wrong STARTTLS connection reuse 8.1 High -
cargoRed Hat proto-default skips SSH verification 7.5 High -
cargoRed Hat cross-origin Digest auth state leak 9.8 Critical -
cargoRed Hat WS Auto-PONG memory exhaustion 7.5 High -
cargoRed Hat Native CA trust persist 9.1 Critical -
cargoRed Hat QUIC zero-length UDP datagrams busy-loop 7.5 High -
cargoRed Hat Crates in third party registries can override the cached source of other crates 6.5 Medium -
cargoRed Hat postcss-selector-parser AST Serialization container.js toString recursion 5.3 Medium -
cargoRed Hat urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API 8.9 High -
cargoRed Hat Wasmtime: Panic when allocating a table exceeding the size of the host's address space 5.9 Medium -
cargoRed Hat rustls-webpki before 0.103.13 Panic via empty BIT STRING 8.7 High -
cargoRed Hat undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent 7.4 High -
cargoRed Hat undici WebSocket client vulnerable to denial of service via cumulative fragment bypass 7.5 High -
cargoRed Hat undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse 7.5 High -
cargoRed Hat js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing 7.5 High -
cargoRed Hat js-yaml: YAML merge-key chains can force quadratic CPU consumption 5.3 Medium -
cargoRed Hat brace-expansion: Large numeric range defeats documented `max` DoS protection 6.5 Medium -
cargoRed Hat Rust standard library didn't detect all path separators on Cygwin 6.3 Medium -
cargoRed Hat Cargo not respecting umask when extracting crate archives 7.8 High -
cargoRed Hat Race condition in std::fs::remove_dir_all in rustlang 7.3 High -
cargoRed Hat Moderate: gcc-toolset-10-gcc security update 8.3 High -
cargoRed Hat library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero... 9.1 Critical -
cargoRed Hat In the standard library in Rust before 1.50.3, there is an optimization for joining strings that... 8.2 High - Show olderLoading…