Approved changes feed: RSS · Atom

cpe:2.3:a:mcginty:snow:*:*:*:*:*:rust:*:*

part: a version: * update: *

VendorMcginty (65b15667-0e47-5b2f-bdbd-b022e51c9a17)
ProductSnow (1735e981-1835-545d-a73e-16da98023478)
Edition*
Language*
Software edition*
Target softwarerust
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:cargo/snow purl2cpe 2026-06-01 10:12:59.790247
pkg:deb/debian/rust-snow purl2cpe 2026-06-01 10:12:59.790249
pkg:deb/ubuntu/rust-snow purl2cpe 2026-06-01 10:12:59.790250
pkg:github/mcginty/snow purl2cpe 2026-06-01 10:12:59.790252

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-58265 vulnerable 2026-06-08 06:56:14.318917 Details available
LOW (3.1)
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery.
Published: 2025-07-27T00:00:00.000Z
Updated: 2025-07-28T15:05:47.523Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.