Important: Red Hat Security Advisory: rust security update

An update for rust is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Astra Linux – Vulnerability in RustC

In the standard library of Rust before version 1.19.0, there is a synchronization issue with the MutexGuard object. MutexGuards can be used across threads of any type, which can lead to memory safety issues due to race conditions...

Astra Linux – Vulnerability in RustC

In the standard library of Rust before version 1.2.0, BinaryHeap is not panic-safe. The binary heap becomes in an inconsistent state when the comparison of generic elements within siftup or siftdownrange causes a panic. This bug results in a decrease of zeroed memory of an arbitrary type, which c...

Astra Linux – Vulnerability in RustC

In the standard library of Rust before version 1.29.0, there is weak synchronization in the Arc::getmut method. This synchronization issue can lead to memory safety issues due to race conditions...

Astra Linux – Vulnerability in Firefox

Crossbeam-deque is a set of work-stealing deques for building task schedulers in Rust programming. In versions prior to 0.7.4 and 0.8.0, the race condition resulted in one or more tasks in the worker queue being popped twice, instead of other tasks that were forgotten and never popped. If tasks a...

Astra Linux – Vulnerability in RustC

In the standard library of Rust before version 1.52.0, a double-free error can occur in the Vec::fromiter function if the process of freeing the element causes a panic...

CVE-2026-90713 vllm-project vLLM tiktoken vocab File mod.rs new denial of service

A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possib...

CVE-2026-90713 vllm-project vLLM tiktoken vocab File mod.rs new denial of service

A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possib...

sklad v0.2.3

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

hayabusa v4.1.0

Windows event log fast forensics timeline generator and threat hunting tool. Written in memory-safe Rust by Yamato Security — the only open-source tool with full Sigma support, including v2 correlation rules. !https://img.shields.io/badge/SINCON%20Kampung%20Wor...

[SECURITY] Fedora 43 Update: rust-hickory-proto-0.26.2-1.fc43

Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 43 Update: rust-hickory-net-0.26.2-1.fc43

Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 43 Update: rust-hickory-resolver-0.26.2-1.fc43

Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...

[SECURITY] Fedora 44 Update: rust-hickory-proto-0.26.2-1.fc44

Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 44 Update: rust-hickory-resolver-0.26.2-1.fc44

Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...

[SECURITY] Fedora 44 Update: rust-hickory-net-0.26.2-1.fc44

Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 45 Update: rust-hickory-net-0.26.2-1.fc45

Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 45 Update: rust-hickory-proto-0.26.2-1.fc45

Hickory-proto is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

[SECURITY] Fedora 45 Update: rust-hickory-resolver-0.26.2-1.fc45

Hickory-resolver is a safe and secure DNS stub resolver library intended to be a high-level library for DNS record resolution...

PT-2026-91176

Name of the Vulnerable Software and Affected Versions vllm-project vLLM versions prior to 0.29.1 Description A flaw in the tiktoken vocab File Handler component allows a local attacker to cause a denial of service. The issue resides in the TiktokenTokenizer::new function within the file...