bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0228...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0227...

bitcoin-nostr-relay (0.1.1), kormir (>=0.1.0, <=1.0.11) +5 more potentially affected by unknown CVE via nostr (>=0.1.5, <=0.40.0)

nostr CARGO version =0.1.5, =0.1.0, =0.2.6, =0.0.1, =0.1.6, =0.19.0, =0.21.0 - nostr-web 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0230...

Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of the cargo crate

Summary The cargo package manager in IBM Open SDK for Rust on AIX 1.92.0.2 and 1.94.0.0 ships a version of the cargo crate that incorrectly handles symlinks inside tar balls. Vulnerability Details CVEID:CVE-2026-5222 DESCRIPTION: Cargo between 1.68 and 1.96 incorrectly normalized the URLs of...

nimiq-accounts (0.1.0), nimiq-block-production (0.1.0) +11 more potentially affected by CVE-2026-33471 via nimiq-block (0.1.0)

nimiq-block CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on nimiq-block and may be impacted: - nimiq-accounts 0.1.0 - nimiq-block-production 0.1.0 - nimiq-blockchain 0.1.0 - nimiq-client 0.1.0 - nimiq-consensus 0.1.0 - nimiq-databas...

atomr-persistence-mongodb (>=0.1.0, <=0.10.1), authifier (>=1.0.10, <=1.0.16) +32 more potentially affected by CVE-2025-11695 via mongodb (3.1.1)

mongodb CARGO version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongodb and may be impacted: - atomr-persistence-mongodb =0.1.0, =1.0.10, =0.2.0, =0.1.0, =1.0.0, =0.1.9, =0.1.10 - mrcon 0.1.0 and more Source cves: CVE-2025-11695 Source...

mcai_worker_sdk (>=0.11.0-alpha, <=2.2.1), srt_media (>=0.0.1, <=0.1.0) potentially affected by unknown CVE via stainless_ffmpeg (>=0.2.4, <=0.3.10)

stainlessffmpeg CARGO version =0.2.4, =0.11.0-alpha, =0.0.1, =0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0169...

async-mongodb-session (2.1.0), chord-action (>=0.1.13, <=0.1.16) +7 more potentially affected by CVE-2024-6382 via mongodb (>=2.0.0-alpha, <=2.6.1)

mongodb CARGO version =2.0.0-alpha, =0.1.13, =0.1.13, =0.1.13, =0.2.1, =0.3.2 - mongodb-gridfs 0.2.0 - rocketauthifier 0.111.0 - sqlite2mongo 0.3.0 Source cves: CVE-2024-6382 Source advisory: OSV:GHSA-32JF-H775-G29H...