GHSA-6662-54XR-8423 `evm-units` was removed from crates.io for malicious code

It appeared to be attempting to steal cryptocurrency...

GHSA-J39J-6GW9-JW6H git2 has potential undefined behavior when dereferencing Buf struct

If the Buf struct is dereferenced immediately after calling new or default on the Buf struct, a null pointer is passed to the unsafe function slice::fromrawparts. According to the safety section documentation of the function, data must be non-null and aligned even for zero-length slices or slices...

WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware

Meta on Tuesday announced it's adding Strict Account Settings on WhatsApp to secure certain users against advanced cyber attacks because of who they are and what they do. The feature, similar to Lockdown Mode in Apple iOS and Advanced Protection in Android, aims to protect individuals, such as...

[SECURITY] Fedora 42 Update: rust-lru-0.16.3-1.fc42

A LRU cache implementation...

EUVD-2026-1420

AWS SDK for Rust v1 adopted defense in depth enhancement for region parameter value...

RSA 安全漏洞

RSA is a Rust library open-sourced by Rust Crypto. A security vulnerability exists in versions of RSA prior to 0.9.10 that stems from a panic when creating an RSA private key, which could lead to mishandling of errors...

The vulnerability of the Rust library for arithmetic calculations on the curve25519‑dalek elliptic curve, related to the removal of optimization during compilation or the elimination of critical code, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the Rust library for arithmetic operations on the curve25519‑dalek elliptic curve is related to the removal of optimization during compilation or the elimination of critical code. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the...

EUVD-2025-203307

A vulnerability has been found in gmg137 snap7-rs up to 1.142.1. Affected is the function snap7rs::client::S7Client::asctwrite of the file /tests/snap7-rs/src/client.rs. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to t...

snap7-rs 安全漏洞

snap7-rs is a library for C++ by the individual developer gmg137. A security vulnerability exists in snap7-rs 1.142.1 and earlier versions, which stems from incorrect manipulation of the function snap7rs::client::S7Client::asctwrite in the file /tests/snap7-rs/src/client.rs, which could result in...

Sequoia PGP 安全漏洞

Sequoia PGP is a Rust library open-sourced by sequoia-pgp. A security vulnerability exists in Sequoia PGP versions prior to 2.1.0, which stems from the fact that aeskeyunwrap crashes when passing too short a ciphertext, potentially crashing the application...

RUSTSEC-2025-0132 `Reader::open_mmap` unsoundly marks unsafe memmap operation as safe

maxminddb prior to version 0.27 declared Reader::openmmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active...

cggmp21 安全漏洞

cggmp21 is a Rust library open-sourced by Lockness. A security vulnerability exists in cggmp21 versions 0.6.3 and earlier and 0.7.0-alpha.1, which stems from improper use of pre-signatures in a manner that may result in reduced security...

cggmp21 数据伪造问题漏洞

cggmp21 is a Rust library open-sourced by Lockness. A data forgery issue vulnerability exists in versions prior to cggmp21 0.6.3, which stems from a missing check in the ZK proof that could lead to a malicious signer reconstructing the full private key...

[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc42

Tokio-based file reader implementation for reqsign...

[SECURITY] Fedora 42 Update: rust-reqsign-aws-v4-2.0.1-1.fc42

AWS SigV4 signing implementation for reqsign...

[SECURITY] Fedora 43 Update: rust-reqsign-aws-v4-2.0.0-1.fc43

AWS SigV4 signing implementation for reqsign...

[SECURITY] Fedora 41 Update: rust-manyhow-0.11.4-1.fc41

Proc macro error handling =C3=A0 la anyhow x proc-macro-error...

RUSTSEC-2025-0131 Lack of sufficient checks in public API

The affected function is unsound due to insufficient checks on public struct field...

ffmpeg 安全漏洞

ffmpeg is a rust library by meh.individual developer. A security vulnerability exists in ffmpeg, which stems from the Firequalizer Filter may be forced to dereference null pointers, potentially resulting in a denial of service...

astral-tokio-tar 安全漏洞

astral-tokio-tar is a Rust library open-sourced by Astral. A security vulnerability exists in astral-tokio-tar versions prior to 0.5.6, which stems from inconsistent boundary parsing and could result in the contents of an interpreted file being a legal tar header...