Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0216 | Remote Denial of Service via malformed NIPβ44 v2 payload | 2026-07-25T12:00:00Z | 2026-07-27T14:44:28Z |
| rustsec-2026-0185 | Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly | 2026-06-22T12:00:00Z | 2026-07-25T06:55:52Z |
| rustsec-2026-0215 | smallstr is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2026-0214 | gumdrop is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2025-0154 | `replit_ruspty` was removed from crates.io for malicious code | 2025-11-04T12:00:00Z | 2026-07-23T06:53:26Z |
| rustsec-2023-0085 | HPACK decoder panics on invalid input | 2023-09-15T12:00:00Z | 2026-07-22T17:32:51Z |
| rustsec-2026-0213 | XSS in ammonia via SVG `animate` and `set` animation tags | 2026-07-21T12:00:00Z | 2026-07-22T08:15:44Z |
| rustsec-2026-0104 | Reachable panic in certificate revocation list parsing | 2026-04-22T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0099 | Name constraints were accepted for certificates asserting a wildcard name | 2026-04-14T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0098 | Name constraints for URI names were incorrectly accepted | 2026-04-14T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0097 | Rand is unsound with a custom logger using `rand::rng()` | 2026-04-09T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0049 | CRLs not considered authoritative by Distribution Point due to faulty matching logic | 2026-03-20T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2024-0404 | Unsoundness in anstream | 2024-09-08T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2024-0401 | Denial of service because of stack overflow with malicious decompression input | 2024-11-14T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2022-0041 | Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64 | 2022-02-05T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2021-0093 | Data race in crossbeam-deque | 2021-07-30T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2021-0080 | Links in archive can create arbitrary directories | 2021-07-19T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2021-0003 | Buffer overflow in SmallVec::insert_many | 2021-01-08T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2020-0164 | `cell-project` used incorrect variance when projecting through `&Cell<T>` | 2020-08-27T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2020-0002 | Parsing a specially crafted message can result in a stack overflow | 2020-01-16T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2019-0012 | Memory corruption in SmallVec::grow() | 2019-07-19T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2018-0009 | MsQueue and SegQueue suffer from double-free | 2018-12-09T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2018-0003 | Possible double free during unwinding in SmallVec::insert_many | 2018-07-19T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0212 | Potentially Incorrect Output of Constant-Time Swap/Select on Aarch64 | 2026-05-26T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0211 | Non-constant time Authentication Tag Check in AES-GCM Decryption | 2026-07-14T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0210 | `libcrux-aesgcm` Renamed to `libcrux-aes` | 2026-07-15T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0209 | AES-GCM did not enforce limits on AAD length | 2026-06-09T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0208 | Potential Panic in AVX2 SHAKE-256 | 2026-05-21T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0207 | Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls | 2026-04-22T12:00:00Z | 2026-07-17T11:34:24Z |