Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 79 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0104 | Reachable panic in certificate revocation list parsing | 2026-04-22T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0099 | Name constraints were accepted for certificates asserting a wildcard name | 2026-04-14T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0098 | Name constraints for URI names were incorrectly accepted | 2026-04-14T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0097 | Rand is unsound with a custom logger using `rand::rng()` | 2026-04-09T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0049 | CRLs not considered authoritative by Distribution Point due to faulty matching logic | 2026-03-20T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2024-0404 | Unsoundness in anstream | 2024-09-08T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2024-0401 | Denial of service because of stack overflow with malicious decompression input | 2024-11-14T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2022-0041 | Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64 | 2022-02-05T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2021-0093 | Data race in crossbeam-deque | 2021-07-30T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2021-0080 | Links in archive can create arbitrary directories | 2021-07-19T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2021-0003 | Buffer overflow in SmallVec::insert_many | 2021-01-08T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2020-0164 | `cell-project` used incorrect variance when projecting through `&Cell<T>` | 2020-08-27T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2020-0002 | Parsing a specially crafted message can result in a stack overflow | 2020-01-16T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2019-0012 | Memory corruption in SmallVec::grow() | 2019-07-19T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2019-0009 | Double-free and use-after-free in SmallVec::grow() | 2019-06-06T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2018-0009 | MsQueue and SegQueue suffer from double-free | 2018-12-09T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2018-0003 | Possible double free during unwinding in SmallVec::insert_many | 2018-07-19T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0212 | Potentially Incorrect Output of Constant-Time Swap/Select on Aarch64 | 2026-05-26T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0211 | Non-constant time Authentication Tag Check in AES-GCM Decryption | 2026-07-14T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0210 | `libcrux-aesgcm` Renamed to `libcrux-aes` | 2026-07-15T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0209 | AES-GCM did not enforce limits on AAD length | 2026-06-09T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0208 | Potential Panic in AVX2 SHAKE-256 | 2026-05-21T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0207 | Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls | 2026-04-22T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0172 | Possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database` | 2026-06-05T12:00:00Z | 2026-07-17T08:34:50Z |
| rustsec-2026-0193 | mXSS in ammonia via MathML `annotation-xml` encoding strip | 2026-06-30T12:00:00Z | 2026-07-17T05:23:11Z |
| rustsec-2026-0188 | WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination | 2026-06-24T12:00:00Z | 2026-07-13T17:31:41Z |
| rustsec-2026-0206 | `rustybuzz` is unmaintained | 2026-07-11T12:00:00Z | 2026-07-12T07:10:54Z |
| rustsec-2026-0155 | `exploration` was removed from crates.io for malicious code | 2026-06-02T12:00:00Z | 2026-07-11T06:12:16Z |
| rustsec-2026-0152 | Use-after-free | 2026-05-27T12:00:00Z | 2026-07-09T06:36:22Z |
| rustsec-2026-0205 | `Array::insert` violates exception safety if compare function panics, leading to potential Double-Free | 2026-07-06T12:00:00Z | 2026-07-07T09:15:02Z |