Vulnerabilidades en rust-lang
10 resultadosAnálisis Vexday
A Rust Foundation mantém um perfil de risco controlado com 10 vulnerabilidades catalogadas, sendo apenas 1 crítica e nenhuma sob exploração ativa no momento. A fraqueza dominante (CWE-400: Uncontrolled Resource Consumption) sugere problemas de tratamento de recursos, mas a ausência de atividade de ataque recente e nenhuma publicação nos últimos 90 dias indicam que o risco atual está estabilizado.
CVE-2024-24576CRITICALRusts's `std::process::Command` did not properly escape arguments of batch files on WindowsEPSS 20.3%CVE-2022-24713HIGHRegular expression denial of service in Rust's regex crateEPSS 14.5%CVE-2022-21658HIGHRace condition in std::fs::remove_dir_all in rustlangEPSS 1.4%CVE-2020-26297HIGHXSS in mdBook's search pageEPSS 1.3%CVE-2022-36113MEDIUMExtracting malicious crates can corrupt arbitrary filesEPSS 1.0%CVE-2023-40030MEDIUMMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reportsEPSS 0.8%CVE-2022-36114MEDIUMExtracting malicious crates can fill the file systemEPSS 0.8%CVE-2023-38497HIGHCargo not respecting umask when extracting crate archivesEPSS 0.8%CVE-2024-43402HIGHRust OS Command Injection/Argument Injection vulnerabilityEPSS 0.7%CVE-2022-46176MEDIUMCargo did not verify SSH host keysEPSS 0.6%