Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0428 | BLAKE2b produces wrong tag when using `reset()` with a different-length key | 2026-10-30T12:00:00Z | 2026-10-30T11:12:39Z |
| rustsec-2026-0427 | `sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip) | 2026-10-29T12:00:00Z | 2026-10-30T11:12:39Z |
| rustsec-2026-0426 | LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time | 2026-10-30T12:00:00Z | 2026-10-30T11:04:43Z |
| rustsec-2026-0425 | `nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal) | 2026-10-30T12:00:00Z | 2026-10-30T10:42:08Z |
| rustsec-2026-0424 | Unchecked memory usage in transferring borrowed resources between components | 2026-10-29T12:00:00Z | 2026-10-30T10:42:08Z |
| rustsec-2026-0423 | Cross-engine type confusion with host-created struct-types-with-supertypes | 2026-10-29T12:00:00Z | 2026-10-30T10:42:08Z |
| rustsec-2026-0422 | Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check | 2026-10-29T12:00:00Z | 2026-10-30T10:42:08Z |
| rustsec-2026-0421 | wasi-http p2: outgoing content-length can be invalid or not match body | 2026-10-29T12:00:00Z | 2026-10-30T10:42:08Z |
| rustsec-2026-0420 | wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving | 2026-10-29T12:00:00Z | 2026-10-30T10:42:08Z |
| rustsec-2026-0419 | Unbounded memory use on large request bodies | 2026-10-29T12:00:00Z | 2026-10-29T14:05:38Z |
| rustsec-2026-0418 | libz-sys build script leaks environment variables in the build directory | 2026-10-28T12:00:00Z | 2026-10-29T14:05:38Z |
| rustsec-2026-0417 | Excessive CPU and memory use on crafted GraphQL documents | 2026-10-28T12:00:00Z | 2026-10-29T14:05:38Z |
| rustsec-2026-0416 | Stack overflow on deeply nested GraphQL documents | 2026-10-28T12:00:00Z | 2026-10-29T14:05:38Z |
| rustsec-2026-0415 | Unbounded memory use on large request bodies | 2026-10-28T12:00:00Z | 2026-10-29T14:05:38Z |
| rustsec-2026-0414 | Exponential event growth with `ENABLE_WIKILINKS` | 2026-10-18T12:00:00Z | 2026-10-28T08:50:03Z |
| rustsec-2026-0413 | Use-after-free of caller-owned server name in client connection constructors | 2026-10-26T12:00:00Z | 2026-10-27T10:02:42Z |
| rustsec-2026-0412 | Arbitrary code execution when rerunning tests from a portable recording | 2026-10-26T12:00:00Z | 2026-10-27T09:50:34Z |
| rustsec-2026-0411 | Out-of-bounds read in `Log2Cache::nlog2n()`, `nlog2n_difference()` and `plog2p()` | 2026-10-22T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0410 | WebAssembly allocator shim corrupts memory on allocation failure | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0409 | Use-after-free from a comparator that answers inconsistently | 2026-10-24T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0408 | Aliasing violations in splice, mutable iteration and cursors | 2026-10-24T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0407 | SSRF and local file disclosure via unvalidated URLs | 2026-10-22T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0406 | Use-after-free when changing a multithreaded context with an unfinished frame | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0405 | Out-of-bounds read with an out-of-range `InBuffer::pos` | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0404 | Double free in `DCtx::try_clone` | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0403 | Uninitialized memory exposed when streaming decompression of a legacy frame fails | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0402 | Heap buffer overflow in `CCtx::try_clone` on a multithreaded context | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0401 | Out-of-bounds read in `train_from_buffer` when sample sizes overflow | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0400 | Use-after-free of a dictionary after a one-shot call on a context with an open stream | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |
| rustsec-2026-0399 | Use-after-free through `init_using_cdict` and `init_using_ddict` | 2026-10-16T12:00:00Z | 2026-10-26T13:45:01Z |