Commit Graph

12 Commits

Author SHA1 Message Date
Alexis Mousset
84c633df9c Update aliases from GHSA OSV export (#1693) 2023-06-13 15:10:24 +02:00
Alexis Mousset
8c05fea5fa Add cvss information from nvd (#1085) 2021-10-19 16:14:35 -06:00
Sergey "Shnatsel" Davidoff
40afced5fb Remove range overlaps, fix some range specifications (#930)
* Drop some clearly redundant bounds

* Fix RUSTSEC-2020-0091 - the version specification was incorrect, marking 1.0.0 as fixed while in reality it was not

* Fix RUSTSEC-2018-0004: presumably any updates to 0.3.x series would also get the fix, it would not be isolated to 0.3.2

* Fix incorrectly defined, overlapping ranges in RUSTSEC-2020-0080 and RUSTSEC-2019-0035
2021-06-04 23:26:23 +02:00
Yechan Bae
b724f12a5b Update CVE numbers (#777)
* Update CVE numbers

* Fix RUSTSEC-2020-0093

* Add another alias for async-h1 crate
2021-02-25 20:00:25 -05:00
github-actions[bot]
7c81bd4fc3 Assigned RUSTSEC-2021-0023 to rand_core (#771)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2021-02-15 07:35:47 -08:00
Diggory Hardy
221ec336f9 rand_core: incorrect check on buffer length when seeding RNGs (#764) 2021-02-15 07:31:38 -08:00
Sergey "Shnatsel" Davidoff
e084c94822 Update RUSTSEC-2019-0035.md 2021-01-20 20:52:39 +01:00
Tony Arcieri
ac125ee29a Translate database into V3 advisory format (#420)
As proposed in #240 and tracked in #414, this PR translates all
advisories into the new "V3" advisory format, which is based on Markdown
with leading TOML front matter.

This format makes it easier to see rendered Markdown syntax
descriptions, whether rendered by an IDE or GitHub. This should help
with both crafting advisories initially as well as review, and ideally
encourages more lengthy descriptions.

Support for this format shipped in `cargo-audit` v0.12.0 on
May 6th, 2020.
2020-10-01 18:29:11 -07:00
Alexander Kjäll
ad7cf2f303 Added CVE number (#384)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-25576
2020-09-19 09:59:34 -04:00
Vinzent Steinberg
a7b90acdc2 Add alias for GHSA (#346)
Co-authored-by: Tony Arcieri <bascule@gmail.com>
2020-08-01 09:40:07 -07:00
github-actions[bot]
fa0771ddb7 Assign RUSTSEC IDs (#342)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 10:03:49 -07:00
Vinzent Steinberg
6d238619b6 Undefined behavior in Rand (#149)
Co-authored-by: Ralf Jung <post@ralfj.de>
Co-authored-by: Tony Arcieri <bascule@gmail.com>
2020-07-24 10:00:19 -07:00