12679 matches found
a1 (>=1.0.1, <=1.0.2), a1_notation (0.6.0) +606 more potentially affected by unknown CVE via rkyv (>=0.7.3, <=0.8.2)
rkyv CARGO version =0.7.3, =1.0.1, =0.2.2, =0.1.0, =0.23.0, =0.23.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.9.0, =0.0.1, =0.0.10 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0235...
a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1343 more potentially affected by unknown CVE via git2 (>=0.1.21, <=0.20.4)
git2 CARGO version =0.1.21, =0.1.0, =0.2.2, =1.1.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.2.0, =0.2.9 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0184...
SUSE CVE-2026-43435
In the Linux kernel, the following vulnerability has been resolved: rustbinder: fix oneway spam detection The spam detection logic in TreeRange was executed before the current request was inserted into the tree. So the new request was not being factored in the spam calculation. Fix this by moving...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.95.0-5.hum1 aarch64, x8664 clippy-1.95.0-5.hum1 aarch64, x8664 rust-1.95.0-5.hum1 aarch64, x8664 rust-analyzer-1.95.0-5.hum1 aarch64, x8664 rust-debugger-common-1.95.0-5.hum1 noarch...
CVE-2026-42545
Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or value. The WSGI response conversion path uses .unwrap on both the header name and header value constructors, so malform...
account-db (0.1.0), actix-web-csp (0.1.0) +1431 more potentially affected by unknown CVE via lru (>=0.1.17, <=0.17.0)
lru CARGO version =0.1.17, =0.1.0, =0.9.0, =0.5.0, =0.0.24, =0.0.23, =0.1.0, =1.0.0, =0.8.0, =0.8.9 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0253...
a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1343 more potentially affected by unknown CVE via git2 (>=0.1.21, <=0.20.4)
git2 CARGO version =0.1.21, =0.1.0, =0.2.2, =1.1.0, =0.2.0, =0.2.0, =0.2.0, =0.0.1, =0.2.0, =0.2.9 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0183...
RUSTSEC-2026-0253 Potential use-after-free due to lack of panic safety in `LruCache::pop()`
LruCache::pop in lru was not panic-safe. If the Drop implementation of a stored key panics during pop, self.detach is never called, leaving dangling pointers in the internal doubly-linked list. A subsequent cache operation that triggers eviction can then dereference these dangling pointers: - The...
Potential use-after-free due to lack of panic safety in `LruCache::pop()`
LruCache::pop in lru was not panic-safe. If the Drop implementation of a stored key panics during pop, self.detach is never called, leaving dangling pointers in the internal doubly-linked list. A subsequent cache operation that triggers eviction can then dereference these dangling pointers: - The...
granian 安全漏洞
Granian is a high-performance Python HTTP server developed by Emmett under open source principles, using Rust as the programming language. Versions of Granian from 0.2.0 to 2.7.4 contain security vulnerabilities. These vulnerabilities occur when the WSGI application returns invalid HTTP response...
CVE-2026-42545: Uncaught Exception
Granian is a Rust HTTP server for Python applications. From 0.2.0 to 2.7.4, Granian aborts a worker process if a WSGI application returns an invalid HTTP response header name or value. The WSGI response conversion path uses .unwrap on both the header name and header value constructors, so malform...
EUVD-2026-29339
Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tokens are not invalidated when the user's securitystamp is rotated by some security-sensitive operations password change, KDF change, key rotation, email change, org admin password reset, emergency access...
CVE-2026-42199
Grid is a data structure grid for rust. From version 0.17.0 to before version 1.0.1, an integer overflow in Grid::expandrows can corrupt the relationship between the grid’s logical dimensions and its backing storage. After the internal invariant is broken, the safe API get may invoke getunchecked...
Malicious code in apkeep (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d545ff7c3c178485cfb49d0028c4c808e67d0ee0fddcb4b7b195c943bb07d888 The package pretends to be a fork of a legitimate Rust library and uses the identity of the original authors. During usage, the obfuscated code targets...
MAL-2026-3431 Malicious code in apkeep (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d545ff7c3c178485cfb49d0028c4c808e67d0ee0fddcb4b7b195c943bb07d888 The package pretends to be a fork of a legitimate Rust library and uses the identity of the original authors. During usage, the obfuscated code targets...
backroll_transport_steam (>=0.1.0, <=0.5.0), bevy-steamworks (>=0.1.0, <=0.2.0) +5 more potentially affected by unknown CVE via steamworks (>=0.6.1, <=0.12.2)
steamworks CARGO version =0.6.1, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-G588-CJG3-6G78...
SUSE CVE-2026-43433
In the Linux kernel, the following vulnerability has been resolved: rustbinder: avoid reading the written value in offsets array When sending a transaction, its offsets array is first copied into the target proc's vma, and then the values are read back from there. This is normally fine because th...
a1 (>=1.0.1, <=1.0.2), actor-kit (>=0.1.0, <=0.2.3) +132 more potentially affected by unknown CVE via rkyv (0.8.2)
rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.4.2 and more Source cves: unknown...
a1 (>=1.0.1, <=1.0.2), actor-kit (>=0.1.0, <=0.2.3) +132 more potentially affected by unknown CVE via rkyv (0.8.2)
rkyv CARGO version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on rkyv and may be impacted: - a1 =1.0.1, =0.1.0, =0.1.0, =0.9.0, =0.1.0, =0.2.1, =0.1.0, =0.4.0, =0.9.0, =0.5.0, =0.5.0, =2.0.0-alpha.1, =0.1.2, =0.4.2 and more Source cves: unknown...
