Droundy vulnerabilities
Published CVEs affecting Droundy products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-77651
Critical · 9.8
CWE-506 Aug 20, 2026
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when…
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.
CVE-2026-77650
Critical · 9.8
CWE-506 Aug 20, 2026
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when…
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.
CVE-2026-77649
Critical · 9.8
CWE-506 Aug 20, 2026
The internment crate 0.8.7 for Rust can trigger execution of malicious code when…
The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.