PT-2026-100927

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-63449: Numeric Truncation Error

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body lengths in 16-bit fields. A SIP body larger than 65,536 bytes can truncate the...

CVE-2026-63452: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the HTTP/1 parser limits decompression work per transaction but does not limit how many small brotli compression bombs a single flow can submit. With...

PT-2026-102114

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101757

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101667

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101085

Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-57227: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

PT-2026-96070

Name of the Vulnerable Software and Affected Versions Eclipse iceoryx2 versions greater than v0.8.0 Description The StaticString component exposes its contents as mutable bytes through safe APIs. The String::as str function converts these bytes into a Rust string slice without validating UTF-8...

oproxy v0.1.11

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

CVE-2026-82252 affecting package rust for versions less than 1.96.1-2

CVE-2026-82252 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...

CVE-2026-7598 affecting package rust for versions less than 1.96.1-2

CVE-2026-7598 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...

CVE-2026-66033 affecting package rust for versions less than 1.96.1-2

CVE-2026-66033 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...

CVE-2026-82253 affecting package rust for versions less than 1.96.1-2

CVE-2026-82253 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...

CVE-2026-82251 affecting package rust for versions less than 1.96.1-2

CVE-2026-82251 affecting package rust for versions less than 1.96.1-2. A patched version of the package is available...

RUSTSEC-2026-0289 pqc_kyber is unmaintained

The crate has had no releases since 0.7.1 2023-08-23, and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend Argyle-Software/kyber121, have gone unanswered. Recommended alternatives: - aws-lc-rs -...

RUSTSEC-2026-0287 cosmian_kyber is unmaintained

cosmiankyber is a fork of Argyle-Software/kyber that has seen no maintainer activity. It inherits the fork parent's broken AVX2 constant-time code, and the open fix pull request Cosmian/kyber6 has gone unanswered. Recommended alternatives: - aws-lc-rs - graviola...

cosmian_kyber is unmaintained

cosmiankyber is a fork of Argyle-Software/kyber that has seen no maintainer activity. It inherits the fork parent's broken AVX2 constant-time code, and the open fix pull request Cosmian/kyber6 has gone unanswered. Recommended alternatives: - aws-lc-rs - graviola...

pqc_kyber is unmaintained

The crate has had no releases since 0.7.1 2023-08-23, and the upstream repository shows no maintainer activity. Open pull requests, including a fix for a chosen-ciphertext key-recovery flaw in the AVX2 backend Argyle-Software/kyber121, have gone unanswered. Recommended alternatives: - aws-lc-rs -...

essh v0.4.0

ESSH An SSH workspace with persistent sessions and live health dashboards. Keep remote shells running across connection drops, switch between hosts with keys or the mouse, and check system health without leaving your terminal. ESSH uses OpenSSH for connections and tmux to keep your work alive. Se...