Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0285 | TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries | 2026-09-14T12:00:00Z | 2026-09-14T16:06:06Z |
| rustsec-2026-0283 | clear_on_drop is unmaintained | 2026-09-13T12:00:00Z | 2026-09-13T20:05:24Z |
| rustsec-2026-0282 | Double free in `AlignedBox<[T]>::realloc_with_default` when an element's `Drop` panics | 2026-09-09T12:00:00Z | 2026-09-09T10:49:52Z |
| rustsec-2026-0281 | `greentic-setup` 1.3.1-dev.34027618345 was removed from crates.io due to containing malicious code | 2026-09-07T12:00:00Z | 2026-09-07T18:19:30Z |
| rustsec-2026-0280 | `greentic-setup-dev` 1.3.34027618345 was removed from crates.io due to containing malicious code | 2026-09-07T12:00:00Z | 2026-09-07T18:19:30Z |
| rustsec-2026-0278 | `zbus_polkit`: authorization bypass via PID reuse | 2026-08-31T12:00:00Z | 2026-09-02T09:13:32Z |
| rustsec-2026-0272 | Panic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free) | 2026-08-27T12:00:00Z | 2026-08-31T09:44:04Z |
| rustsec-2026-0284 | Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear` | 2026-08-26T12:00:00Z | 2026-09-14T09:48:33Z |
| rustsec-2026-0277 | Path traversal in apimock-server's file-serving fallback | 2026-08-26T12:00:00Z | 2026-09-02T08:56:54Z |
| rustsec-2026-0276 | Path traversal in apimock's file-serving fallback | 2026-08-26T12:00:00Z | 2026-09-02T08:56:54Z |
| rustsec-2026-0267 | Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free) | 2026-08-24T12:00:00Z | 2026-08-25T02:41:54Z |
| rustsec-2026-0269 | Filesystem sandbox escape when paths or symlinks contain trailing slashes | 2026-08-20T12:00:00Z | 2026-08-31T08:25:36Z |
| rustsec-2026-0268 | Guest controlled-size host heap allocation through WASIp3 streams | 2026-08-20T12:00:00Z | 2026-08-31T08:25:36Z |
| rustsec-2026-0266 | `internment` 0.8.7 was removed from crates.io due to a malicious dependency | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0265 | `proc-macro1` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0264 | `proc-macro-en` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0263 | `tinymember` was removed from crates.io due to affiliation with malicious code | 2026-08-20T12:00:00Z | 2026-08-20T15:52:09Z |
| rustsec-2026-0262 | `append-only-vec` 0.1.9 was removed from crates.io due to a malicious dependency | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0261 | `aronenao` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0260 | `arrayref` 0.3.10 was removed from crates.io due to a malicious dependency | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0259 | `arone` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0271 | FTP command injection via CRLF in control channel arguments | 2026-08-18T12:00:00Z | 2026-08-31T09:17:28Z |
| rustsec-2026-0258 | h2 unbounded empty DATA frames | 2026-08-17T12:00:00Z | 2026-08-18T08:23:07Z |
| rustsec-2026-0275 | Legacy `azure_core` writes the `authorization` header value to logs | 2026-08-15T12:00:00Z | 2026-09-01T19:23:55Z |
| rustsec-2026-0270 | `sp-sized-chunks` is unmaintained | 2026-08-11T12:00:00Z | 2026-08-31T08:41:58Z |
| rustsec-2026-0256 | Panic-safety unsoundness in `truncate_back`, `truncate_front`, `clear`, and `extend_from_slice` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0255 | Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0254 | Panic-safety unsoundness in `Chunk` and `InlineArray` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0252 | Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read) | 2026-08-11T12:00:00Z | 2026-08-11T10:40:01Z |
| rustsec-2026-0242 | Safe ErrorRegistry APIs can cause undefined behavior | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |