[SECURITY] Fedora 43 Update: rust-ammonia-4.1.4-1.fc43

HTML Sanitization...

[SECURITY] Fedora 43 Update: python-nh3-0.2.21-9.fc43

Python binding to Ammonia HTML sanitizer Rust crate...

Fedora 43 : python-nh3 / rust-ammonia (2026-9324385c43)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9324385c43 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...

dnsglobe v0.5.0

dnsglobe A global DNS propagation checker for your terminal — a Rust TUI that queries 34 public DNS resolvers around the world in parallel, compares their answers, and shows the propagation of your record on a world map. Think dnschecker.org / whatsmydns.net, but in your terminal, with watch mode...

miasma v0.4.1

🌀 Miasma AI companies continually scrape the internet at an enormous scale, swallowing up all of its contents to use as training data for their next models. If you have a public website, they are already stealing your work. Miasma is here to help you fight back! Spin up the server and point any...

rscrypto v0.8.0

rscrypto rscrypto provides pure Rust cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. It has no production C/FFI, OpenSSL, or system-library dependency. Leaf features support narrow builds; umbrella features compose larger surfaces...

comiconv (>=0.1.0, <=0.1.2), waifu-diffuser-types (0.0.0) potentially affected by unknown CVE via sevenz-rust (0.2.10)

sevenz-rust CARGO version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on sevenz-rust and may be impacted: - comiconv =0.1.0, =0.1.2 - waifu-diffuser-types 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0246...

comiconv (>=0.1.0, <=0.1.2), waifu-diffuser-types (0.0.0) potentially affected by unknown CVE via sevenz-rust (0.2.10)

sevenz-rust CARGO version 0.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on sevenz-rust and may be impacted: - comiconv =0.1.0, =0.1.2 - waifu-diffuser-types 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0245...

appfinder (>=0.1.0, <=0.1.2), breezy (3.3.4) +25 more potentially affected by unknown CVE via gettext-rs (>=0.4.4, <=0.7.7)

gettext-rs CARGO version =0.4.4, =0.1.0, =0.0.4, =0.4.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.2.0, =0.0.7, =1.1.0, =0.1.0, =0.5.0, =0.5.0, =0.6.4 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0244...

RUSTSEC-2026-0246 `sevenz-rust` is unmaintained

The sevenz-rust repository has been deleted and the crate is no longer actively maintained. Users should migrate away from the library in favor of a modern up-to-date 7z library such as sevenz-rust2...

RUSTSEC-2026-0245 Relative/Absolute Path Traversal (CWE-23/CWE-36) in `decompress_impl` that enables an arbitrary file write.

Summary All versions of sevenz-rust fail to validate file paths when extracting in decompressimpl the underlying function used in the exposed decompress api functions. This oversight allows a maliciously crafted archive to extract outside the extraction directory, from both relative paths such as...

Relative/Absolute Path Traversal (CWE-23/CWE-36) in `decompress_impl` that enables an arbitrary file write.

Summary All versions of sevenz-rust fail to validate file paths when extracting in decompressimpl the underlying function used in the exposed decompress api functions. This oversight allows a maliciously crafted archive to extract outside the extraction directory, from both relative paths such as...

`sevenz-rust` is unmaintained

The sevenz-rust repository has been deleted and the crate is no longer actively maintained. Users should migrate away from the library in favor of a modern up-to-date 7z library such as sevenz-rust2...

BLAKE3 v1.8.6

BLAKE3 BLAKE3 is a cryptographic hash function that is: Much faster than MD5, SHA-1, SHA-2, SHA-3, and BLAKE2. Secure , unlike MD5 and SHA-1. And secure against length extension, unlike SHA-2. Highly parallelizable across any number of threads and SIMD lanes, because it's a Merkle tree on the...

CVE-2026-18980

A vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is the function classifycommandrisk of the file src/tools/builtin/shell.rs. Such manipulation leads to command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The name of...

PT-2026-76525

Summary All versions of sevenz-rust fail to validate file paths when extracting in decompress impl the underlying function used in the exposed decompress api functions. This oversight allows a maliciously crafted archive to extract outside the extraction directory, from both relative paths such a...

PT-2026-76526

The sevenz-rust repository has been deleted and the crate is no longer actively maintained. Users should migrate away from the library in favor of a modern up-to-date 7z library such as sevenz-rust2...

RustGo: Fairly Directed Greybox Fuzzing for Enforcing Rust Memory Safety

Rust is a popular systems programming language that provides strong memory safety and introduces low-performance overhead. While Rust guarantees memory safety through strict security policies, such as ownership, memory bugs can still occur in unsafe-related Rust codes where these policies are not...

mini-diarium v0.6.5

Mini Diarium A local-only journal with serious encryption. Free, open source, and never touches the internet. !Microsoft Storehttps://img.shields.io/badge/Microso...

apm v11.2.0

APM A better local password manager for everyone. APM is a fast, zero-knowledge CLI password manager written in Go and Rust. It stores 25+ structured secret types in a single encrypted vault — from passwords and TOTP codes to SSH keys, medical records, photos, and binary files. Two binaries ship...