146 matches found
JLSEC-2026-1268 Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list
The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...
Photon OS 5.0: Rust PHSA-2023-5.0-91-0067
An update of the rust package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0067. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-40034 affecting package rust for versions less than 1.75.0-30
CVE-2026-40034 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-5223 affecting package rust for versions less than 1.75.0-30
CVE-2026-5223 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-40034 affecting package rust for versions less than 1.90.0-9
CVE-2026-40034 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
CVE-2026-5223 affecting package rust for versions less than 1.90.0-9
CVE-2026-5223 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...
Cargo 安全漏洞
Cargo is a Rust package manager open-sourced by The Rust Programming Language. A security vulnerability exists in Cargo that stems from the incorrect handling of symbolic links in a crate tarball downloaded from a third-party registry, which could lead to a malicious crate overwriting the source...
[SECURITY] Fedora 42 Update: uv-0.11.11-1.fc42
An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-33056 affecting package rust for versions less than 1.75.0-28
CVE-2026-33056 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-33055 affecting package rust for versions less than 1.90.0-7
CVE-2026-33055 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
CVE-2026-33055 affecting package rust for versions less than 1.75.0-28
CVE-2026-33055 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-34743 affecting package rust for versions less than 1.90.0-7
CVE-2026-34743 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
CVE-2026-33056 affecting package rust for versions less than 1.90.0-7
CVE-2026-33056 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
CVE-2026-27171 affecting package rust for versions less than 1.72.0-15
CVE-2026-27171 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...