12673 matches found
CVE-2026-81526 Cross-database write redirection via unvalidated dotted database name in bulk write namespaces
The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...
EUVD-2026-67210
The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended...
CVE-2026-81526
The MongoDB Rust Driver fails to neutralize special characters in a caller-supplied target identifier before embedding it in requests sent to the server. Per the CVELIST entry, the specific root cause is an unvalidated dotted database name in bulk write namespaces , allowing an attacker with low ...
kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)
stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...
RUSTSEC-2026-0272 Panic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)
Three removal and replacement paths destroy an initialized value before committing the metadata change that removes it. Destruction runs T::drop, which is user code and may panic. If it does, the commit is skipped and the container still claims ownership of the already-destroyed value, so its own...
keyhog v0.5.86
Website · Documentation · Architecture · Vyre GPU engine KeyHog: GPU-accelerated secret scanner for code, cloud, and CI KeyHog is an open-source secret scanner in Rust that finds and verifies leaked API keys, tokens, passwords, and credentials across source code, Git history, containers, cloud...
cottage v0.7.0
cott age is a GitOps tool for teams to manage age-encrypted secrets in git repositories. It provides a simple workflow to encrypt/decrypt secrets, manage recipients, and keep secrets out of the repo while still allowing for easy sharing via VCS. cottage also generates redacted previews of encrypt...
[SECURITY] Fedora 43 Update: rust-cargo-0.98.0-1.fc43
Package manager for Rust...
[SECURITY] Fedora 43 Update: rust-rustfix-0.9.7-1.fc43
Automatically apply the suggestions made by rustc...
[SECURITY] Fedora 43 Update: rust-cargo-util-0.2.30-1.fc43
Miscellaneous support code used by Cargo...
[SECURITY] Fedora 43 Update: rust-anstyle-progress-0.1.4-1.fc43
ANSI escape code progress reporting OSC 9;4...
[SECURITY] Fedora 43 Update: rust-cargo-util-terminal-0.1.0-1.fc43
Cargo's terminal rendering...
[SECURITY] Fedora 43 Update: rust-crates-io-0.41.0-1.fc43
Helpers for interacting with crates.io...
[SECURITY] Fedora 43 Update: rust-cargo-c-0.10.24-2.fc43
Helper program to build and install c-like libraries...
[SECURITY] Fedora 43 Update: rust-cargo-util-schemas-0.14.1-1.fc43
Deserialization schemas for Cargo...
[SECURITY] Fedora 43 Update: rust-anstyle-hyperlink-1.0.2-1.fc43
ANSI escape code hyperlinks OSC 8...
[SECURITY] Fedora 44 Update: rust-cargo-util-terminal-0.1.0-1.fc44
Cargo's terminal rendering...
[SECURITY] Fedora 44 Update: rust-rustfix-0.9.7-1.fc44
Automatically apply the suggestions made by rustc...