CVE-2023-48795 affecting package rust for versions less than 1.75.0-24

CVE-2023-48795 affecting package rust for versions less than 1.75.0-24. An upgraded version of the package is available that resolves this issue...

AZL-76721 CVE-2026-25541 affecting package rust for versions less than 1.90.0-6

Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...

MiracleLinux 9 : rust-1.66.1-2.el9 (AXSA:2023-6341:10)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6341:10 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from...

AZL-74805 CVE-2025-68114 affecting package rust for versions less than 1.90.0-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...

`sha-rust` was removed from crates.io for malicious code

It appeared to be attempting to steal credentials from local files...

CVE-2025-53605 affecting package rust for versions less than 1.72.0-11

CVE-2025-53605 affecting package rust for versions less than 1.72.0-11. A patched version of the package is available...

[SECURITY] Fedora 43 Update: rust-get-size-derive2-0.7.1-1.fc43

Derives the GetSize trait...

apple-opensource-downloader (0.1.0), async_bagit (>=0.1.0, <=0.2.0) +14 more potentially affected by CVE-2025-62518 via tokio-tar (0.3.1)

tokio-tar CARGO version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio-tar and may be impacted: - apple-opensource-downloader 0.1.0 - asyncbagit =0.1.0, =0.1.8, =0.8.0, =0.7.0, =0.2.0, =0.0.0, =0.1.0, =0.2.5, =0.4.0, =0.2.14, =0.6.0,...

[SECURITY] Fedora 42 Update: rust-az-snp-vtpm-0.7.4-1.fc42

VTPM based SEV-SNP attestation for Azure Confidential VMs...

[SECURITY] Fedora 42 Update: rust-az-tdx-vtpm-0.7.4-1.fc42

VTPM based TDX attestation for Azure Confidential VMs...

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6. A patched version of the package is available...

CVE-2025-53605 affecting package rust for versions less than 1.86.0-4

CVE-2025-53605 affecting package rust for versions less than 1.86.0-4. A patched version of the package is available...

CVE-2025-54368 uv is vulnerable to ZIP payload obfuscation through parsing differentials

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2023-53158 affecting package rust for versions less than 1.72.0-8

CVE-2023-53158 affecting package rust for versions less than 1.72.0-8. A patched version of the package is available...

CVE-2025-4574 affecting package rust for versions less than 1.75.0-16

CVE-2025-4574 affecting package rust for versions less than 1.75.0-16. A patched version of the package is available...

CVE-2025-4574 affecting package rust for versions less than 1.86.0-3

CVE-2025-4574 affecting package rust for versions less than 1.86.0-3. A patched version of the package is available...

AZL-65565 CVE-2025-53605 affecting package rust for versions less than 1.75.0-17

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

AZL-65568 CVE-2025-53605 affecting package rust for versions less than 1.86.0-4

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup parsing of unknown fields in untrusted input...

Fedora: Security Advisory (FEDORA-2024-3534c44ef9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-4432

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...