Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0216 | Remote Denial of Service via malformed NIPβ44 v2 payload | 2026-07-25T12:00:00Z | 2026-07-27T14:44:28Z |
| rustsec-2026-0215 | smallstr is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2026-0214 | gumdrop is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2026-0213 | XSS in ammonia via SVG `animate` and `set` animation tags | 2026-07-21T12:00:00Z | 2026-07-22T08:15:44Z |
| rustsec-2026-0210 | `libcrux-aesgcm` Renamed to `libcrux-aes` | 2026-07-15T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0211 | Non-constant time Authentication Tag Check in AES-GCM Decryption | 2026-07-14T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0206 | `rustybuzz` is unmaintained | 2026-07-11T12:00:00Z | 2026-07-12T07:10:54Z |
| rustsec-2026-0205 | `Array::insert` violates exception safety if compare function panics, leading to potential Double-Free | 2026-07-06T12:00:00Z | 2026-07-07T09:15:02Z |
| rustsec-2026-0204 | Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid | 2026-07-06T12:00:00Z | 2026-07-06T22:19:41Z |
| rustsec-2026-0203 | `tree-sitter-perl-next` is unmaintained | 2026-07-06T12:00:00Z | 2026-07-06T09:08:34Z |
| rustsec-2026-0202 | `let_cxx_string!` uses uninitialized value due to exception safety violations | 2026-07-05T12:00:00Z | 2026-07-05T08:34:37Z |
| rustsec-2026-0201 | Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service) | 2026-07-05T12:00:00Z | 2026-07-04T20:19:28Z |
| rustsec-2026-0200 | Unbounded page slicing from attacker-controlled CSS height causes denial of service | 2026-07-05T12:00:00Z | 2026-07-04T19:39:58Z |
| rustsec-2026-0198 | `Report::frames_mut` allows aliased mutable references | 2026-07-03T12:00:00Z | 2026-07-03T14:33:41Z |
| rustsec-2026-0196 | `cgmath` is unmaintained | 2026-07-01T12:00:00Z | 2026-07-03T13:44:38Z |
| rustsec-2026-0193 | mXSS in ammonia via MathML `annotation-xml` encoding strip | 2026-06-30T12:00:00Z | 2026-07-17T05:23:11Z |
| rustsec-2026-0195 | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | 2026-06-29T12:00:00Z | 2026-07-02T08:52:02Z |
| rustsec-2026-0194 | Quadratic run time when checking a start tag for duplicate attribute names | 2026-06-29T12:00:00Z | 2026-07-02T07:59:25Z |
| rustsec-2026-0192 | `ttf-parser` is unmaintained | 2026-06-28T12:00:00Z | 2026-06-29T20:59:47Z |
| rustsec-2026-0190 | Unsoundness in `Error::downcast_mut()` | 2026-06-25T12:00:00Z | 2026-06-29T14:05:53Z |
| rustsec-2026-0188 | WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination | 2026-06-24T12:00:00Z | 2026-07-13T17:31:41Z |
| rustsec-2026-0185 | Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly | 2026-06-22T12:00:00Z | 2026-07-25T06:55:52Z |
| rustsec-2026-0187 | Stack overflow in lopdf via deeply nested PDF objects | 2026-06-21T12:00:00Z | 2026-06-26T09:58:24Z |
| rustsec-2026-0199 | Panic in `bcrypt::verify` on non-ASCII hash input | 2026-06-20T12:00:00Z | 2026-07-04T08:15:24Z |
| rustsec-2026-0186 | Unchecked pointer offset in crate `memmap2` | 2026-06-20T12:00:00Z | 2026-06-22T18:11:20Z |
| rustsec-2026-0182 | Leak in WASIp1 `fd_renumber` implementation | 2026-06-15T12:00:00Z | 2026-06-15T23:29:39Z |
| rustsec-2026-0180 | Panic decoding a malformed `hstore` value allows denial of service | 2026-06-12T12:00:00Z | 2026-06-12T17:27:58Z |
| rustsec-2026-0179 | Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service | 2026-06-12T12:00:00Z | 2026-06-12T17:27:58Z |
| rustsec-2026-0178 | Panic on a `DataRow` with fewer fields than columns allows denial of service | 2026-06-12T12:00:00Z | 2026-06-12T17:27:58Z |
| rustsec-2026-0177 | Missing `Sync` bound on `PyCFunction::new_closure` closures | 2026-06-11T12:00:00Z | 2026-06-13T06:16:34Z |