Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
astral-tokio-tar
|
astral-tokio-tar Vulnerable to PAX Header Desynchronization | High Risk 8.1 | 11 months ago | 3 hours ago |
|
astral-tokio-tar
|
`unpack_in` can chmod arbitrary directories by following symlinks | Unknown | 5 months ago | 3 hours ago |
|
astral-tokio-tar
|
PAX Header Desynchronization in astral-tokio-tar | Unknown | 5 months ago | 3 hours ago |
|
astral-tokio-tar
|
PAX Header Desynchronization in astral-tokio-tar | Unknown | 4 months ago | 3 hours ago |
|
tokio
|
reject_remote_clients Configuration corruption | Unknown | 3 years ago | 3 hours ago |
|
astral-tokio-tar
|
astral-tokio-tar: `unpack_in` can chmod arbitrary directories by following symlinks | Low Risk 3.0 | 5 months ago | 1 month ago |
|
astral-tokio-tar
|
astral-tokio-tar is Vulnerable to PAX Header Desynchronization | Medium Risk 6.0 | 5 months ago | 1 month ago |
|
astral-tokio-tar
|
astral-tokio-tar insufficiently validates PAX extensions during extraction | Medium Risk 5.3 | 6 months ago | 1 month ago |
|
astral-tokio-tar
|
astral-tokio-tar Vulnerable to PAX Header Desynchronization | High Risk 8.1 | 11 months ago | 1 month ago |
|
tokio-tar
|
astral-tokio-tar Vulnerable to PAX Header Desynchronization | High Risk 8.1 | 11 months ago | 1 month ago |
|
tokio
|
Tokio broadcast channel calls clone in parallel, but does not require `Sync` | Low Risk 3.0 | 1 year ago | 1 month ago |
|
tokio
|
`tokio::io::ReadHalf<T>::unsplit` is Unsound | Low Risk 3.0 | 3 years ago | 1 month ago |
|
tokio
|
Tokio reject_remote_clients configuration may get dropped when creating a Windows named pipe | Medium Risk 5.4 | 3 years ago | 1 month ago |
|
tokio-postgres
|
tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service | Medium Risk 6.0 | 1 month ago | 1 month ago |
|
tokio-postgres
|
Panic on a `DataRow` with fewer fields than columns allows denial of service | Unknown | 4 months ago | 1 month ago |
|
tokio-boring
|
tokio-boring vulnerable to resource exhaustion via memory leak | Medium Risk 5.3 | 2 years ago | 3 months ago |
|
astral-tokio-tar
|
astral-tokio-tar has a PAX Header Desynchronization issue | Medium Risk 6.0 | 4 months ago | 4 months ago |
|
astral-tokio-tar
|
Insufficient validation of PAX extensions during extraction | Unknown | 6 months ago | 6 months ago |
|
tokio-process
|
`tokio-process` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-codec
|
`tokio-codec` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-tcp
|
`tokio-tcp` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-timer
|
`tokio-timer` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-executor
|
`tokio-executor` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-udp
|
`tokio-udp` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-signal
|
`tokio-signal` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-uds
|
`tokio-uds` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-threadpool
|
`tokio-threadpool` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-sync
|
`tokio-sync` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-tls
|
`tokio-tls` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-current-thread
|
`tokio-current-thread` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-reactor
|
`tokio-reactor` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-io
|
`tokio-io` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-fs
|
`tokio-fs` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-compat
|
`tokio-compat` is unmaintained | Unknown | 6 months ago | 6 months ago |
|
tokio-tar
|
`tokio-tar` parses PAX extended headers incorrectly, allows file smuggling | Unknown | 11 months ago | 8 months ago |
|
astral-tokio-tar
|
astral-tokio-tar has a path traversal in tar extraction | Medium Risk 6.0 | 1 year ago | 10 months ago |
|
tokio
|
Broadcast channel calls clone in parallel, but does not require `Sync` | Unknown | 1 year ago | 11 months ago |
|
libp2p-tokio-socks5
|
`libp2p-tokio-socks5` is unmaintained | Unknown | 2 years ago | 2 years ago |
|
tokio
|
`tokio::io::ReadHalf<T>::unsplit` is Unsound | Unknown | 3 years ago | 2 years ago |
|
tokio
|
Race Condition in tokio | High Risk 8.1 | 4 years ago | 2 years ago |
|
tokio
|
Data race when sending and receiving after closing a `oneshot` channel | Unknown | 4 years ago | 2 years ago |
|
tokio
|
Race condition in tokio | Medium Risk 5.9 | 5 years ago | 2 years ago |
|
tokio
|
Task dropped in wrong thread when aborting `LocalSet` task | Unknown | 5 years ago | 2 years ago |
|
tokio-rustls
|
Excessive memory usage in tokio-rustls | High Risk 7.5 | 5 years ago | 2 years ago |
|
tokio-rustls
|
tokio-rustls reads may cause excessive memory usage | High Risk 7.5 | 6 years ago | 2 years ago |
|
tokio-proto
|
`tokio-proto` is deprecated/unmaintained | Unknown | 6 years ago | 4 years ago |
Page 1