Vulnerabilities

Recent vulnerabilities

Recent vulnerabilities from 🏠GNA-1 (CIRCL)
Select from 79 available sources using the dropdown above.

OSV Rustsec πŸ¦€ is not individually searchable yet β€” the search will cover the sources available on the search page.

OSV Rustsec πŸ¦€

Recent vulnerabilities Β· 1147 entries
ID Description Published Updated
rustsec-2026-0104 Reachable panic in certificate revocation list parsing 2026-04-22T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2026-0099 Name constraints were accepted for certificates asserting a wildcard name 2026-04-14T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2026-0098 Name constraints for URI names were incorrectly accepted 2026-04-14T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2026-0097 Rand is unsound with a custom logger using `rand::rng()` 2026-04-09T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2026-0049 CRLs not considered authoritative by Distribution Point due to faulty matching logic 2026-03-20T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2024-0404 Unsoundness in anstream 2024-09-08T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2024-0401 Denial of service because of stack overflow with malicious decompression input 2024-11-14T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2022-0041 Unsoundness of AtomicCell<*64> arithmetics on 32-bit targets that support Atomic*64 2022-02-05T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2021-0093 Data race in crossbeam-deque 2021-07-30T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2021-0080 Links in archive can create arbitrary directories 2021-07-19T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2021-0003 Buffer overflow in SmallVec::insert_many 2021-01-08T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2020-0164 `cell-project` used incorrect variance when projecting through `&Cell<T>` 2020-08-27T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2020-0002 Parsing a specially crafted message can result in a stack overflow 2020-01-16T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2019-0012 Memory corruption in SmallVec::grow() 2019-07-19T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2019-0009 Double-free and use-after-free in SmallVec::grow() 2019-06-06T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2018-0009 MsQueue and SegQueue suffer from double-free 2018-12-09T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2018-0003 Possible double free during unwinding in SmallVec::insert_many 2018-07-19T12:00:00Z 2026-07-17T15:52:38Z
rustsec-2026-0212 Potentially Incorrect Output of Constant-Time Swap/Select on Aarch64 2026-05-26T12:00:00Z 2026-07-17T11:34:24Z
rustsec-2026-0211 Non-constant time Authentication Tag Check in AES-GCM Decryption 2026-07-14T12:00:00Z 2026-07-17T11:34:24Z
rustsec-2026-0210 `libcrux-aesgcm` Renamed to `libcrux-aes` 2026-07-15T12:00:00Z 2026-07-17T11:34:24Z
rustsec-2026-0209 AES-GCM did not enforce limits on AAD length 2026-06-09T12:00:00Z 2026-07-17T11:34:24Z
rustsec-2026-0208 Potential Panic in AVX2 SHAKE-256 2026-05-21T12:00:00Z 2026-07-17T11:34:24Z
rustsec-2026-0207 Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls 2026-04-22T12:00:00Z 2026-07-17T11:34:24Z
rustsec-2026-0172 Possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database` 2026-06-05T12:00:00Z 2026-07-17T08:34:50Z
rustsec-2026-0193 mXSS in ammonia via MathML `annotation-xml` encoding strip 2026-06-30T12:00:00Z 2026-07-17T05:23:11Z
rustsec-2026-0188 WASI hard links and renames bypass wasmtime-wasi's FilePerms for destination 2026-06-24T12:00:00Z 2026-07-13T17:31:41Z
rustsec-2026-0206 `rustybuzz` is unmaintained 2026-07-11T12:00:00Z 2026-07-12T07:10:54Z
rustsec-2026-0155 `exploration` was removed from crates.io for malicious code 2026-06-02T12:00:00Z 2026-07-11T06:12:16Z
rustsec-2026-0152 Use-after-free 2026-05-27T12:00:00Z 2026-07-09T06:36:22Z
rustsec-2026-0205 `Array::insert` violates exception safety if compare function panics, leading to potential Double-Free 2026-07-06T12:00:00Z 2026-07-07T09:15:02Z