Approved changes feed: RSS · Atom

cpe:2.3:a:nanorand_project:nanorand:*:*:*:*:*:rust:*:*

part: a version: * update: *

VendorNanorand Project (85d59bf8-229d-52cd-a674-c916ddcca3f5)
ProductNanorand (5312850f-e3ad-56f5-9733-6043957c9353)
Edition*
Language*
Software edition*
Target softwarerust
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/absolucy/nanorand-rs purl2cpe 2026-06-01 10:11:27.257030

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45705 vulnerable 2026-06-08 05:36:49.333940 Details available
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer.
Published: 2021-12-26T21:48:21.000Z
Updated: 2024-08-04T04:47:02.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35926 vulnerable 2026-06-08 05:25:02.338419 Details available
An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled.
Published: 2020-12-31T08:16:30.000Z
Updated: 2024-08-04T17:16:13.237Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.