12674 matches found
actix-casbin (>=0.4.0, <=1.1.0), actix-casbin-auth (>=0.4.0, <=1.1.0) +654 more potentially affected by unknown CVE via smartstring (>=0.2.7, <=1.0.1)
smartstring CARGO version =0.2.7, =0.4.0, =0.4.0, =0.3.5, =0.1.4, =0.0.2, =0.0.3, =0.0.10, =0.1.3, =0.1.0, =0.2.0, =0.2.0, =0.8.0, =0.8.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0249...
aper (>=0.2.0, <=0.3.0), aper-stateroom (0.3.0) +210 more potentially affected by unknown CVE via im-rc (>=12.3.4, <=15.1.0)
im-rc CARGO version =12.3.4, =0.2.0, =0.3.3, =0.1.0, =0.1.0, =1.0.0, =2.1.0 - bytebraise 0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0250...
accesskit_consumer (>=0.1.0, <=0.7.1), accesskit_windows (>=0.1.0, <=0.8.0) +1194 more potentially affected by unknown CVE via bitmaps (>=2.1.0, <=3.2.1)
bitmaps CARGO version =2.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.5, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.0-alpha, =0.0.1-alpha.1, =0.0.1 - agsol-wasm-factory 0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0247...
RUSTSEC-2026-0248 im is unmaintained
The im crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternative: imbl is a maintained fork of this crate...
RUSTSEC-2026-0250 im-rc is unmaintained
The im-rc crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. imbl is a maintained fork of the im crate, but we're not aware of maintained alternative to im-rc at this time...
RUSTSEC-2026-0251 sized-chunks is unmaintained
The sized-chunks crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternative: imbl-sized-chunks, a popular fork of this crate...
RUSTSEC-2026-0249 smartstring is unmaintained
The smartstring crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternatives: compactstr smolstr...
im-rc is unmaintained
The im-rc crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. imbl is a maintained fork of the im crate, but we're not aware of maintained alternative to im-rc at this time...
bitmaps is unmaintained
The bitmaps crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternatives: fixedbitset bitvec...
sized-chunks is unmaintained
The sized-chunks crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternative: imbl-sized-chunks, a popular fork of this crate...
smartstring is unmaintained
The smartstring crate is unmaintained; all versions are affected. The GitHub repository was archived by the owner on 2026-05-03. Recommended alternatives: compactstr smolstr...
[SECURITY] Fedora 42 Update: rust-sequoia-git-0.6.0-1.fc42
A tool for managing and enforcing a commit signing policy...
[SECURITY] Fedora 43 Update: rust-sequoia-git-0.6.0-1.fc43
A tool for managing and enforcing a commit signing policy...
xhci (>=0.2.6, <=0.9.2) potentially affected by unknown CVE via accessor (>=0.2.0, <=0.3.3)
accessor CARGO version =0.2.0, =0.2.6, =0.9.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0127...
RUSTSEC-2026-0132 Potential out-of-bounds write via public `Context` fields
The Context struct has all fields public pub dlen, pub digest, etc.. Code from other modules within the same crate can directly modify dlen to a value exceeding the digest vector length. When reset is subsequently called, self.digestself.dlen as usize = 0 becomes an out-of-bounds write. Withdrawa...
RUSTSEC-2026-0127 Integer overflow in `array::ReadWrite::new()` leading to potential memory corruption
In array::ReadWrite::new line 83 of accessor/src/array.rs, let bytes = mem::sizeof:: len can overflow usize when len is very large. In release mode, this silently wraps, potentially making bytes = 0. The mapper then maps with 0 bytes, and subsequent accesses e.g. readvolatileat lead to undefined...
Null-pointer dereference and double-free via safe APIs
Two soundness violations exist in the Rust bindings for MetaCall: Null-pointer dereference: MetaCallFuture::newraw accepts a raw pointer without validation. The Debug impl calls Box::fromrawself.data on it. Passing a null pointer causes the Debug impl to construct a NonNull from null, producing...
Invalid pointer arithmetic in `iter()` and `iter_mut()`
The iter and itermut APIs compute current = &children0 as const const RawAutoChild.sub1, which performs pointer subtraction going before the start of the allocation. This is undefined behavior per Rust's pointer arithmetic rules. This can be triggered through safe public APIs — iter and itermut —...