crates.io kayıtları
crates.io üreticisine ait 1.199 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 6
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read17
- CWE-20 Improper Input Validation15
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')13
- CWE-863 Incorrect Authorization13
- CWE-770 Allocation of Resources Without Limits or Throttling12
- CWE-416 Use After Free11
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
1.199 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | GHSA-5wp8-q9mx-8jx8İstismar yok | zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcardscrates.io · zeptoclaw · CWE-77 | Kritik10,0 | — | — | 5 Mar 2026 |
39İzleyin | RUSTSEC-2022-0051İstismar yok | Memory corruption in liblz4crates.io · lz4-sys | Kritik9,8 | — | — | 25 Ağu 2022 |
39İzleyin | GHSA-9q5j-jm53-v7vrİstismar yok | lz4-sys vulnerable to memory corruption via issue in liblz4crates.io · lz4-sys · CWE-190 | Kritik9,8 | — | — | 1 Eyl 2022 |
39İzleyin | GHSA-x4mq-m75f-mx8mİstismar yok | Delegate functions are missing `Send` boundcrates.io · windows · CWE-820 | Kritik9,8 | — | — | 17 Haz 2022 |
39İzleyin | RUSTSEC-2021-0122İstismar yok | Generated code can read and write out of bounds in safe codecrates.io · flatbuffers | Kritik9,8 | — | — | 31 Eki 2021 |
39İzleyin | GHSA-3jch-9qgp-4844İstismar yok | Generated code can read and write out of bounds in safe codecrates.io · flatbuffers | Kritik9,8 | — | — | 16 Haz 2022 |
38İzleyin | GHSA-f9v3-j2m7-4hpgİstismar yok | Duplicate Advisory: HTTP Request Smuggling via Premature Upgradecrates.io · pingora-core · CWE-444 | Kritik9,5 | — | — | 5 Mar 2026 |
38İzleyin | GHSA-f8h5-x737-x4xrİstismar yok | `finch-rust` was removed from crates.io for malicious codecrates.io · finch-rust | Kritik9,5 | — | — | 6 Şub 2026 |
38İzleyin | GHSA-fxc9-7j2w-vx54İstismar yok | mpp has multiple payment bypass and griefing vulnerabilitiescrates.io · mpp · CWE-288 | Kritik9,5 | — | — | 29 Mar 2026 |
38İzleyin | GHSA-82vg-5v4f-f9wqİstismar yok | Namada-apps can Crash with Excessive Computation in Mempool Validationcrates.io · namada-apps · CWE-770 | Kritik9,5 | — | — | 20 Şub 2025 |
38İzleyin | GHSA-3mmg-7c2q-8938İstismar yok | `sha-rust` was removed from crates.io for malicious codecrates.io · sha-rust | Kritik9,5 | — | — | 6 Şub 2026 |
38İzleyin | GHSA-cwfq-rfcr-8hmpİstismar yok | Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputscrates.io · zebrad · CWE-354 | Kritik9,5 | — | — | 7 May 2026 |
38İzleyin | GHSA-262p-vjx5-45xhİstismar yok | Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsingcrates.io · pingora-core · CWE-444 | Kritik9,5 | — | — | 5 Mar 2026 |
38İzleyin | GHSA-f8qm-hmm3-fv7fİstismar yok | Namada-apps allows Excessive Computation in Mempool Validationcrates.io · namada-apps · CWE-770 | Kritik9,5 | — | — | 20 Şub 2025 |
38İzleyin | GHSA-6v2j-vr4h-f632İstismar yok | `finch_cli_rust` was removed from crates.io for malicious codecrates.io · finch_cli_rust · CWE-506 | Kritik9,5 | — | — | 12 Şub 2026 |
38İzleyin | GHSA-84x2-2qv6-qg56İstismar yok | Nervos CKB P2P DoS Attackscrates.io · ckb | Kritik9,5 | — | — | 2 Şub 2024 |
38İzleyin | GHSA-382q-fpqh-29f7İstismar yok | `polymarket-clients-sdk` was removed from crates.io for malicious codecrates.io · polymarket-clients-sdk | Kritik9,5 | — | — | 6 Şub 2026 |
38İzleyin | GHSA-2gw2-qgjg-xh6pİstismar yok | Namada-apps allows Post-Genesis Validator Bypasscrates.io · namada-apps · CWE-248 | Kritik9,5 | — | — | 20 Şub 2025 |
38İzleyin | GHSA-99j7-fhr2-xfj4İstismar yok | `exploration` was removed from crates.io for malicious codecrates.io · exploration · CWE-506 | Kritik9,5 | — | — | 10 Tem 2026 |
38İzleyin | GHSA-6662-54xr-8423İstismar yok | `evm-units` was removed from crates.io for malicious codecrates.io · evm-units | Kritik9,5 | — | — | 6 Şub 2026 |
38İzleyin | GHSA-77xj-rrh3-wx3vİstismar yok | `time_calibrator` was removed from crates.io due to malicious codecrates.io · time_calibrator | Kritik9,5 | — | — | 4 Mar 2026 |
38İzleyin | GHSA-7fw6-6mfj-g3q2İstismar yok | ckb: Transaction header_deps validation issue (network forking)crates.io · ckb | Kritik9,5 | — | — | 2 Kas 2022 |
38İzleyin | GHSA-5pmp-jpcf-pwx6İstismar yok | `tracing-check` was removed from crates.io for malicious codecrates.io · tracing-check | Kritik9,5 | — | — | 2 Mar 2026 |
38İzleyin | GHSA-2fjw-whxm-9v4qİstismar yok | libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)crates.io · nftnl · CWE-122 | Kritik9,5 | — | — | 25 Kas 2025 |
38İzleyin | GHSA-5w5r-mf82-595pİstismar yok | Cap'n Proto has Undefined Behavior in constant::Reader and StructSchemacrates.io · capnp · CWE-758 | Kritik9,5 | — | — | 28 Oca 2026 |
- GHSA-5wp8-q9mx-8jx840Planlayın
zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards
KritikCVSS 10,0İstismar yokcrates.io · zeptoclaw5 Mar 2026
- RUSTSEC-2022-005139İzleyin
Memory corruption in liblz4
KritikCVSS 9,8İstismar yokcrates.io · lz4-sys25 Ağu 2022
- GHSA-9q5j-jm53-v7vr39İzleyin
lz4-sys vulnerable to memory corruption via issue in liblz4
KritikCVSS 9,8İstismar yokcrates.io · lz4-sys1 Eyl 2022
- GHSA-x4mq-m75f-mx8m39İzleyin
Delegate functions are missing `Send` bound
KritikCVSS 9,8İstismar yokcrates.io · windows17 Haz 2022
- RUSTSEC-2021-012239İzleyin
Generated code can read and write out of bounds in safe code
KritikCVSS 9,8İstismar yokcrates.io · flatbuffers31 Eki 2021
- GHSA-3jch-9qgp-484439İzleyin
Generated code can read and write out of bounds in safe code
KritikCVSS 9,8İstismar yokcrates.io · flatbuffers16 Haz 2022
- GHSA-f9v3-j2m7-4hpg38İzleyin
Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
KritikCVSS 9,5İstismar yokcrates.io · pingora-core5 Mar 2026
- GHSA-f8h5-x737-x4xr38İzleyin
`finch-rust` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · finch-rust6 Şub 2026
- GHSA-fxc9-7j2w-vx5438İzleyin
mpp has multiple payment bypass and griefing vulnerabilities
KritikCVSS 9,5İstismar yokcrates.io · mpp29 Mar 2026
- GHSA-82vg-5v4f-f9wq38İzleyin
Namada-apps can Crash with Excessive Computation in Mempool Validation
KritikCVSS 9,5İstismar yokcrates.io · namada-apps20 Şub 2025
- GHSA-3mmg-7c2q-893838İzleyin
`sha-rust` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · sha-rust6 Şub 2026
- GHSA-cwfq-rfcr-8hmp38İzleyin
Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs
KritikCVSS 9,5İstismar yokcrates.io · zebrad7 May 2026
- GHSA-262p-vjx5-45xh38İzleyin
Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
KritikCVSS 9,5İstismar yokcrates.io · pingora-core5 Mar 2026
- GHSA-f8qm-hmm3-fv7f38İzleyin
Namada-apps allows Excessive Computation in Mempool Validation
KritikCVSS 9,5İstismar yokcrates.io · namada-apps20 Şub 2025
- GHSA-6v2j-vr4h-f63238İzleyin
`finch_cli_rust` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · finch_cli_rust12 Şub 2026
- GHSA-84x2-2qv6-qg5638İzleyin
Nervos CKB P2P DoS Attacks
KritikCVSS 9,5İstismar yokcrates.io · ckb2 Şub 2024
- GHSA-382q-fpqh-29f738İzleyin
`polymarket-clients-sdk` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · polymarket-clients-sdk6 Şub 2026
- GHSA-2gw2-qgjg-xh6p38İzleyin
Namada-apps allows Post-Genesis Validator Bypass
KritikCVSS 9,5İstismar yokcrates.io · namada-apps20 Şub 2025
- GHSA-99j7-fhr2-xfj438İzleyin
`exploration` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · exploration10 Tem 2026
- GHSA-6662-54xr-842338İzleyin
`evm-units` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · evm-units6 Şub 2026
- GHSA-77xj-rrh3-wx3v38İzleyin
`time_calibrator` was removed from crates.io due to malicious code
KritikCVSS 9,5İstismar yokcrates.io · time_calibrator4 Mar 2026
- GHSA-7fw6-6mfj-g3q238İzleyin
ckb: Transaction header_deps validation issue (network forking)
KritikCVSS 9,5İstismar yokcrates.io · ckb2 Kas 2022
- GHSA-5pmp-jpcf-pwx638İzleyin
`tracing-check` was removed from crates.io for malicious code
KritikCVSS 9,5İstismar yokcrates.io · tracing-check2 Mar 2026
- GHSA-2fjw-whxm-9v4q38İzleyin
libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)
KritikCVSS 9,5İstismar yokcrates.io · nftnl25 Kas 2025
- GHSA-5w5r-mf82-595p38İzleyin
Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema
KritikCVSS 9,5İstismar yokcrates.io · capnp28 Oca 2026