2021 CVE Vulnerabilities

23,448 CVEs published in 2021.

CVE IDSeverityCVSSDescription
CVE-2021-45710HIGH8.1An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain ci...
CVE-2021-45709CRITICAL9.8An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an ...
CVE-2021-45708HIGH7.5An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insuffici...
CVE-2021-45707CRITICAL9.8An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 ...
CVE-2021-45706CRITICAL9.8An issue was discovered in the zeroize_derive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum.
CVE-2021-45705CRITICAL9.8An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the sam...
CVE-2021-45704HIGH8.1An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption beca...
CVE-2021-45703CRITICAL9.8An issue was discovered in the tectonic_xdv crate before 0.1.12 for Rust. XdvParser::<T>::process may read from uninitia...
CVE-2021-45702HIGH7.5An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-f...
CVE-2021-45701CRITICAL9.8An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-f...
CVE-2021-45700HIGH7.5An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blo...
CVE-2021-45699HIGH7.5An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack ag...
CVE-2021-45698CRITICAL9.8An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations wh...
CVE-2021-45697CRITICAL9.8An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result.
CVE-2021-45696CRITICAL9.8An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the...
CVE-2021-45695CRITICAL9.8An issue was discovered in the mopa crate through 2021-06-01 for Rust. It incorrectly relies on Trait memory layout, pos...
CVE-2021-45694HIGH7.5An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locati...
CVE-2021-45693CRITICAL9.8An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string_primitive may read f...
CVE-2021-45692CRITICAL9.8An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_extension_others may read f...
CVE-2021-45691CRITICAL9.8An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string may read from uninit...
CVE-2021-45690CRITICAL9.8An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_binary may read from uninit...
CVE-2021-45689CRITICAL9.8An issue was discovered in the gfx-auxil crate through 2021-01-07 for Rust. gfx_auxil::read_spirv may read from uninitia...
CVE-2021-45688CRITICAL9.8An issue was discovered in the ash crate before 0.33.1 for Rust. util::read_spv may read from uninitialized memory locat...
CVE-2021-45687CRITICAL9.8An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used (which is not the...
CVE-2021-45686CRITICAL9.8An issue was discovered in the csv-sniffer crate through 2021-01-05 for Rust. preamble_skipcount may read from uninitial...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now