158 matches found
AZL-99846 CVE-2026-80230 affecting package rust 1.90.0-10
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
AZL-99819 CVE-2026-19931 affecting package rust 1.75.0-30
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...
AZL-99861 CVE-2026-13608 affecting package rust 1.90.0-10
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
AZL-97413 CVE-2026-55894 affecting package rust for versions less than 1.96.1-1
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...
[SECURITY] Fedora 43 Update: rust-bat-0.26.1-3.fc43
A cat1 clone with wings...
AZL-96734 CVE-2026-49263 affecting package rust for versions less than 1.75.0-30
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...
JLSEC-2026-1268 Cap'n Proto and its Rust implementation vulnerable to out-of-bounds read due to logic error handling list-of-list
The Cap'n Proto library and capnp Rust package are vulnerable to out-of-bounds read due to logic error handling list-of-list. If a message consumer expects data of type "list of pointers", and if the consumer performs certain specific actions on such data, then a message producer can cause the...
Photon OS 5.0: Rust PHSA-2023-5.0-91-0067
An update of the rust package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0067. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-40034 affecting package rust for versions less than 1.75.0-30
CVE-2026-40034 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-5223 affecting package rust for versions less than 1.75.0-30
CVE-2026-5223 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
CVE-2026-40034 affecting package rust for versions less than 1.90.0-9
CVE-2026-40034 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
CVE-2026-5223 affecting package rust for versions less than 1.90.0-9
CVE-2026-5223 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...
AZL-88281 CVE-2026-5222 affecting package rust for versions less than 1.90.0-9
Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a registry could obtain the...
Cargo 安全漏洞
Cargo is a Rust package manager open-sourced by The Rust Programming Language. A security vulnerability exists in Cargo that stems from the incorrect handling of symbolic links in a crate tarball downloaded from a third-party registry, which could lead to a malicious crate overwriting the source...
[SECURITY] Fedora 42 Update: uv-0.11.11-1.fc42
An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...
async-std-resolver (>=0.25.0-alpha.1, <=0.25.0-alpha.5), ezk-sip-ua (>=0.5.0, <=0.7.1) +5 more potentially affected by unknown CVE via hickory-proto (>=0.25.0-alpha.1, <=0.25.0-alpha.5)
hickory-proto CARGO version =0.25.0-alpha.1, =0.25.0-alpha.1, =0.5.0, =0.25.0-alpha.1, =0.25.0-alpha.5 - hickory-resolver 0.25.0-alpha.1 - hickory-server 0.25.0-alpha.1 - shadowsocks 1.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3V94-MW7P-V465...