xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

CLEANSTART-2026-HJ01174 Security fix for GHSA-2mjx-qc3c-rqvc applied in: rustup 1.28.2-r3

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RZ85173 Security fix for GHSA-q83h-524g-xf6h applied in: rustup 1.28.2-r2

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZE24156 Security fix for GHSA-w44r-93j7-qv28 applied in: rustup 1.28.2-r4

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QO07216 Security fix for GHSA-h2v8-394m-p7vv applied in: rustup 1.28.2-r4

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GS73039 Security fix for GHSA-vp88-798v-h67f applied in: rustup 1.28.2-r4

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QQ62108 Security fix for GHSA-c8m5-c952-6cm4 applied in: rustup 1.28.2-r4

Security vulnerability affects the rustup package. This issue is resolved in later releases. See references for vulnerability details...

SUSE SLES16 Security Update : rustup (SUSE-SU-2026:24014-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24014-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

openSUSE 16 Security Update : rustup (openSUSE-SU-2026:22016-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22016-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

Security update for rustup (important)

openSUSE security update: security update for rustup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22016-1 Rating: important References: bsc1230032 bsc1243862 bsc1249008 bsc1257902 bsc1270186 bsc1270521 bsc1270619 bsc1270644 bsc1270795 bsc1270870...

OPENSUSE-SU-2026:22016-1 Security update for rustup

This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve...

SUSE-SU-2026:24014-1 Security update for rustup

This update for rustup fixes the following issues: - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160: tracing-subscriber: Tracing log pollution bsc1249008. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve...

OPENSUSE-SU-2026:11525-1 rustup-1.29.0~0-1.1 on GA media

These are all security issues fixed in the rustup-1.29.00-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-76451

These are all security issues fixed in the rustup-1.29.00-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: xh, wasmcloud, wash, pixi, nushell, deno, rustls-ffi, zola, tealdeer, rye, shadowsocks-rust, qdrant, zizmor, rustup, sqlx, lychee, linkerd2-proxy, linkerd-extension-init, samply, kdash, wasm-pack, atuin, ntpd-rs, sdp-k8s-injector, oranda, buck2, uv, cargo-audit,...

CVE-2026-62203

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-62203

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-62203 OpenClaw < 2026.6.6 Environment Variable Injection via rustup

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-62203 OpenClaw < 2026.6.6 Environment Variable Injection via rustup

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...

CVE-2026-62203

OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup variables. Attackers with lower-trust caller access or configured input paths can execute or persist actions beyond their intended authorization...