Vulnerabilities represent the interesection of the Advisory database and a particular Cargo.lock file.
Advisory
Cargo.lock
A vulnerable package and the associated advisory