CVE-2026-93601

rustls-webpki (the Rust webpki fork used by rustls) versions ≥ 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly evaluated permitted-subtree DNS name constraints for wildcard certificates. For example, a name constraint of accept.example.com was treated as satisfied by a certificate f...

CVE-2026-93601

rustls-webpki the Rust webpki fork used by rustls versions = 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name constraint of accept.example.com was treated as satisfied by a...

CVE-2026-93600 rustls webpki Name Constraints URI Validation Bypass

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

CVE-2026-93600 rustls webpki Name Constraints URI Validation Bypass

rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...

RUSTSEC-2026-0294 Unsoundness in UTF-8 'String' trait

The String API in iceoryx2-bb-container exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust...

CLEANSTART-2026-LX05449 Security fix for CVE-2019-12083 applied in: rust 1.34.2-r0

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KD42401 Security fix for CVE-2019-16760 applied in: rust 1.26.0-r0

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YW17751 Security fix for CVE-2021-31162 applied in: rust 1.51.0-r2

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TK31372 Security fix for CVE-2020-36323 applied in: rust 1.51.0-r2

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XV51845 Security fix for CVE-2021-42574 applied in: rust 1.56.1-r0

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KA82053 Security fix for CVE-2022-46176 applied in: rust 1.66.1-r0

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SJ40187 Security fix for CVE-2023-38497 applied in: rust 1.71.1-r0

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

RustHound-CE v2.5.14

RustHound-CE is a cross-platform and cross-compiled BloodHound collector tool written in Rust, making it compatible with Linux, Windows, and macOS. It therefore generates all the JSON files that can be analyzed by BloodHound Community Edition. This version is only compatible with BloodHound...

OPENSUSE-SU-2026:11818-1 shadowsocks-rust-1.25.0-1.1 on GA media

These are all security issues fixed in the shadowsocks-rust-1.25.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-57224: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

CVE-2026-63448: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, becaus...

PT-2026-101757

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-63452: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

CVE-2026-71418: Inefficient Algorithmic Complexity

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously processed HTTP/2 DATA frame contents instead of clearing the internal buffer...

CVE-2026-57227: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...