CVE-2025-47735

inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...

CVE-2025-47737

lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero...

CVE-2025-47735

CVE-2025-47735 affects the Rust wgp crate (versions 0.2.0 and earlier). The root cause is missing drop_slow thread synchronization in inner::drop (inner.rs), leading to a race condition in multithreaded contexts. Exploit details are not provided in the documents; remediation references suggest av...

AZL-74894 CVE-2025-4207 affecting package rust for versions less than 1.90.0-4

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...

SUSE CVE-2024-58253

In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value...

python3.12-setuptools-rust bug fix and enhancement update

An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...

python3.12-setuptools-rust bug fix and enhancement update

An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...

rust-toolset:rhel8 bug fix and enhancement update

An update is available for rust, module.rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

RUSTSEC-2025-0064 soundness issue and unmaintained

wrenrust::macros::defaultrealloc lacks sufficient checks to it pointer parameter which passed into free and realloc wrenrust is unmaintained...

RUSTSEC-2025-0113 soundness issue and unmaintained

shaman::cryptoutil::writeu64vle and other functions mentioned above cannot garantee memory safety of getunchecked later if both length are zero. shaman is unmaintained...

mod3d-gl (>=0.1.0, <=0.2.0), mod3d-gltf (>=0.1.0, <=0.2.0) +1 more potentially affected by unknown CVE via mod3d-base (>=0.1.0, <=0.2.0)

mod3d-base CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0171...

PT-2025-37169

wren rust::macros:: default realloc lacks sufficient checks to it pointer parameter which passed into free and realloc wren rust is unmaintained...

CVE-2023-45853 affecting package rust for versions less than 1.85.0-1

CVE-2023-45853 affecting package rust for versions less than 1.85.0-1. A patched version of the package is available...

CVE-2022-24713 affecting package rust for versions less than regex-1.8.4

CVE-2022-24713 affecting package rust for versions less than regex-1.8.4. A patched version of the package is available...

CVE-2022-31394 affecting package rust for versions less than hyper-0.14.25

CVE-2022-31394 affecting package rust for versions less than hyper-0.14.25. A patched version of the package is available...

CVE-2023-26964 affecting package rust for versions less than h2-0.3.26

CVE-2023-26964 affecting package rust for versions less than h2-0.3.26. A patched version of the package is available...

CVE-2022-23639 affecting package rust for versions less than crossbeam_utils-0.8.7

CVE-2022-23639 affecting package rust for versions less than crossbeamutils-0.8.7. A patched version of the package is available...

Targeted Fuzzing for Unsafe Rust Code: Leveraging Selective Instrumentation

Rust is a promising programming language that focuses on concurrency, usability, and security. It is used in production code by major industry players and got recommended by government bodies. Rust provides strong security guarantees achieved by design utilizing the concepts of ownership and...

Fedora: Security Advisory (FEDORA-2025-5e5b0cc812)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RUSTSEC-2025-0163 Unsound issue in Trailer

Our static analyzer find a potential unsound issue in the construction of Trailer, where it doesn't provide enough check to ensure the soundness. trailer/src/lib.rs, Lines 18 to 25 in d474984: pub fn newcapacity: usize - Trailer unsafe let trailer = Trailer::allocatecapacity; let ptr = trailer.pt...