Security Vulnerabilities - CVEs Published In 2021
An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes.
CVSS Score
7.5
EPSS Score
0.013
Published
2021-08-08
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-08-08
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-08-08
An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying pointer.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-08-08
An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implemented unconditionally.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-08-08
An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-08-08
An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function (for yielding values) has Send bounds.
CVSS Score
5.9
EPSS Score
0.011
Published
2021-08-08
An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander<EI> types that they contain.
CVSS Score
5.9
EPSS Score
0.01
Published
2021-08-08
Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http/httputil ReverseProxy panic upon an ErrAbortHandler abort.
CVSS Score
5.9
EPSS Score
0.031
Published
2021-08-08
An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.
CVSS Score
6.1
EPSS Score
0.007
Published
2021-08-08