Rust-lang Rust vulnerabilities

• rust-lang rust Rust OS Command Injection/Argument Injection vulnerability CVE-2024-43402 8.2 HighSeptember 4, 2024
• go programming language golang, haskell process library, haskell programming language haskel +6 more +8 more Command injection vulnerability in programing languages on Microsoft Windows operating system. CVE-2024-3566 Fix available 9.8 CriticalApril 10, 2024
• rust-lang rust, fedoraproject fedora +1 more Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows CVE-2024-24576 Public exploitFix available EPSS 20.3% 10.0 CriticalApril 9, 2024
• rust-lang cargo, rust +1 more Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports CVE-2023-40030 Fix available 6.1 MediumAugust 24, 2023
• apple macos, rust-lang rust, apple ipados +4 more +6 more Race condition in std::fs::remove_dir_all in rustlang CVE-2022-21658 Public exploitFix available 7.3 HighJanuary 20, 2022
• rust-lang rust library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero... CVE-2021-29922 Fix available 9.1 CriticalAugust 7, 2021
• rust-lang rust In the standard library in Rust before 1.19.0, there is a synchronization problem in the... CVE-2017-20004 Fix available 5.9 MediumApril 14, 2021
• rust-lang rust, fedoraproject fedora +1 more In the standard library in Rust before 1.50.3, there is an optimization for joining strings that... CVE-2020-36323 Fix available 8.2 HighApril 14, 2021
• rust-lang rust In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut... CVE-2018-25008 Fix available 5.9 MediumApril 14, 2021
• rust-lang rust, fedoraproject fedora +1 more In the standard library in Rust before 1.53.0, a double free can occur in the Vec::from_iter... CVE-2021-31162 Fix available 9.8 CriticalApril 14, 2021
• rust-lang rust In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is... CVE-2015-20001 Fix available 7.5 HighApril 11, 2021
• rust-lang rust In the standard library in Rust before 1.49.0, String::retain() function has a panic safety... CVE-2020-36317 Fix available 7.5 HighApril 11, 2021
• rust-lang rust In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the... CVE-2020-36318 Fix available 9.8 CriticalApril 11, 2021
• rust-lang rust, fedoraproject fedora +1 more In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect... CVE-2021-28879 Public exploitFix available 9.8 CriticalApril 11, 2021
• rust-lang rust, fedoraproject fedora +1 more In the standard library in Rust before 1.52.0, the Zip implementation calls... CVE-2021-28878 Fix available 7.5 HighApril 11, 2021
• rust-lang rust In the standard library in Rust before 1.51.0, the Zip implementation calls... CVE-2021-28877 Fix available 7.5 HighApril 11, 2021
• rust-lang rust, fedoraproject fedora +1 more In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue.... CVE-2021-28876 Fix available 5.3 MediumApril 11, 2021
• rust-lang rust In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value... CVE-2021-28875 Fix available 7.5 HighApril 11, 2021
• rust cargo, rust-lang rust +1 more Cargo prior to Rust 1.26.0 may download the wrong dependency CVE-2019-16760 Fix available 4.6 MediumSeptember 30, 2019
• rust-lang rust, the rust programming language standard library +1 more The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200:... CVE-2019-1010299 Fix available 5.3 MediumJuly 15, 2019
• rust-lang rust, fedoraproject fedora, opensuse leap +2 more The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method... CVE-2019-12083 Fix available 8.1 HighMay 13, 2019
• rust-lang rust The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126... CVE-2018-1000810 Fix available 9.8 CriticalOctober 8, 2018
• rust-lang rust Rust Programming Language Rust standard library version Commit... CVE-2018-1000657 Fix available 7.8 HighAugust 20, 2018
• rust-lang rust The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427:... CVE-2018-1000622 Fix available 7.8 HighJuly 9, 2018