Skip to content

xcb (crates.io)

Advisories
9
Latest version
—
License
—
OpenSSF Scorecard
—

How to fix

Upgrading to 1.6.0 or later clears every advisory below that has a fix.

Upgrade commands
cargo
cargo update -p xcb --precise 1.6.0

Known vulnerabilities

AdvisorySeverityAffectedFixed in
GHSA-655h-hg88-5qmf
Rust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety
Low
< 1.6.0
1.6.0
GHSA-655h-hg88-5qmf
Rust XCB `xcb::Connection::connect_to_fd*` functions violate I/O safety
Low
>= 0.0.0-0, < 1.6.0
1.6.0
GHSA-2xpg-3hx4-fm9r
Out of bounds read in xcb
Critical
EPSS 1.73%
< 1.0.0
1.0.0
GHSA-2xpg-3hx4-fm9r
Out of bounds read in xcb
Critical
EPSS 1.73%
< 1.0.0
1.0.0
GHSA-2xpg-3hx4-fm9r
Out of bounds read in xcb
Critical
EPSS 1.73%
>= 0.0.0-0, < 1.0.0
1.0.0
GHSA-2xpg-3hx4-fm9r
Out of bounds read in xcb
Critical
EPSS 1.73%
< 1.0.0
1.0.0
GHSA-2xpg-3hx4-fm9r
Out of bounds read in xcb
Critical
EPSS 1.73%
< 1.0.0
1.0.0
GHSA-c8hq-x4mm-p6q6
Memory handling issues in xcb
Medium
EPSS 0.41%
< 1.0.0
1.0.0
GHSA-c8hq-x4mm-p6q6
Memory handling issues in xcb
Medium
EPSS 0.41%
>= 0.0.0-0, < 1.0.0
1.0.0
Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor