rustsec icon indicating copy to clipboard operation
rustsec copied to clipboard

RustSec API & Tooling

Results 193 rustsec issues
Sort by recently updated
recently updated
newest added

examples: - https://rustsec.org/advisories/RUSTSEC-2023-0083.html links to https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H - https://rustsec.org/advisories/RUSTSEC-2024-0336.html links to https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H The example report at https://github.com/rustsec/advisory-db/blob/main/EXAMPLE_ADVISORY.md?plain=1#L12 does include the version qualifier, so the contents of advisory-db for these two reports...

bug
web

Bumps [toml_edit](https://github.com/toml-rs/toml) from 0.22.6 to 0.22.12. Commits 8fed242 chore: Release 280c4da docs: Update changelog 8f00bf0 Merge pull request #716 from epage/check 73cbee7 test(fuzz): Verify error rendering doesn't panic ed26084 Merge...

dependencies
rust

Possible values for CLI arguments `--target-os` and `--target-arch` are undocumented. Currently when you run `cargo audit --help` you only get this information: ``` Options: --target-arch filter vulnerabilities by CPU (default:...

CLI flags in `cargo_audit::commands::audit::AuditCommand` are duplicated in `cargo_audit::commands::audit::binary_scanning::BinCommand`. This means that running help commands will produce: $ cargo run -q -p cargo-audit -- audit -h ``` Audit Cargo.lock files for...

Currently you can only specify one target os or arch for filtering vulnerabilities. This choice seems odd to me, because supporting a fixed number of platforms should be pretty popular...

Not a big issue, but just saw it recently. ## Version cargo-audit-audit 0.20.0 ## OS Win 11 x64

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 4634c16e79c963813287e889244c50009e7f0981 to 69320dbe05506a9a39fc8ae11030b214ec2d1f87. Changelog Sourced from softprops/action-gh-release's changelog. 2.0.5 Factor in file names with spaces when upserting files #446 via @​MystiPanda Improvements to error handling #449 via...

dependencies
github_actions

Bumps [atom_syndication](https://github.com/rust-syndication/atom) from 0.12.2 to 0.12.3. Changelog Sourced from atom_syndication's changelog. 0.12.3 - 2024-05-11 Bump MSRV (Minimum Supported Rust Version) from 1.56.0 to 1.57.0 [#80](https://github.com/rust-syndication/atom/issues/80) Update quick-xml and derive_builder dependencies....

dependencies
rust

Bumps [rust-embed](https://github.com/pyros2097/rust-embed) from 8.3.0 to 8.4.0. Changelog Sourced from rust-embed's changelog. [8.4.0] - 2024-05-11 Re-export RustEmbed as Embed #245. Thanks to pyrossh Do not build glob matchers repeatedly when include-exclude...

dependencies
rust