PT-2026-101757

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102192

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

AZL-99846 CVE-2026-80230 affecting package rust 1.90.0-10

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

AZL-99819 CVE-2026-19931 affecting package rust 1.75.0-30

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

AZL-99861 CVE-2026-13608 affecting package rust 1.90.0-10

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...

AZL-97413 CVE-2026-55894 affecting package rust for versions less than 1.96.1-1

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

[SECURITY] Fedora 43 Update: rust-bat-0.26.1-3.fc43

A cat1 clone with wings...

AZL-96734 CVE-2026-49263 affecting package rust for versions less than 1.75.0-30

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...

JLSEC-2026-1268 Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list

The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...

Photon OS 5.0: Rust PHSA-2023-5.0-91-0067

An update of the rust package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0067. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-5223 affecting package rust for versions less than 1.75.0-30

CVE-2026-5223 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...

CVE-2026-40034 affecting package rust for versions less than 1.75.0-30

CVE-2026-40034 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...

CVE-2026-5222 affecting package rust for versions less than 1.75.0-30

CVE-2026-5222 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...

CVE-2026-40034 affecting package rust for versions less than 1.90.0-9

CVE-2026-40034 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

CVE-2026-5222 affecting package rust for versions less than 1.90.0-9

CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

CVE-2026-5223 affecting package rust for versions less than 1.90.0-9

CVE-2026-5223 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

AZL-88281 CVE-2026-5222 affecting package rust for versions less than 1.90.0-9

Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a registry could obtain the...

Cargo 安全漏洞

Cargo is a Rust package manager open-sourced by The Rust Programming Language. A security vulnerability exists in Cargo that stems from the incorrect handling of symbolic links in a crate tarball downloaded from a third-party registry, which could lead to a malicious crate overwriting the source...

[SECURITY] Fedora 42 Update: uv-0.11.11-1.fc42

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...