12675 matches found
EUVD-2026-61164
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...
CVE-2026-52734 ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...
openvas-scanner v23.50.17
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
CVE-2026-52737: Insufficient Verification of Data Authenticity
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a malicious unauthenticated P2P peer can answer Zebra's outbound getblocks or FindBlocks request with a small two-hash inventory and then serve a syntactically valid block whose coinbase height is far above the local chain tip. In...
Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2026-2065)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2065 advisory. rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipherupdateinplace in openssl/src/cipherctx.rs incorrectly sized output...
CVE-2026-52735: Incorrect Provision of Specified Functionality
ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2shinputsigopcount used the...
Amazon Linux 2 : rust, --advisory ALAS2-2026-3865 (ALAS-2026-3865)
The version of rust installed on the remote host is prior to 1.97.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3865 advisory. RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time...
PT-2026-78232
Name of the Vulnerable Software and Affected Versions Confidential Containers Guest Components versions 0.16.0 through 0.19.0 Description A crafted OCI image layer can cause the image rs::stream::unpack::unpack function to create a hardlink outside its intended destination directory. This occurs...
CVE-2026-47699: Improper Limitation of a Pathname to a Restricted Directory
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can make imagers::stream::unpack::unpack create a hardlink outside its destination directory. In image-rs/src/stream/unpack.rs,...
ANT-2026-PQ3CNCCK · firecracker-microvm/firecracker · Memory Safety / Out-of-Bounds Read+Write (unsafe Rust)
oob-read high CVE-2026-5747 GHSA-776c-mpj7-jm3r Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-PQ3CNCCK: Virtio-PCI queue size writable after activation enables host OOB I...
hermes-decomp v0.2.2
Rust decompiler for Hermes bytecode .hbc, the JS engine behind React Native. Supports HBC 40 to 99. Install Pre-built binaries Linux / macOS / Windows from Releases or Actions: Asset suffix| Platform ---|--- linux-x8664 / linux-arm64| Linux macos-arm64 / macos-x8664| macOS windows-x8664| Windows...
a-gpt (>=0.1.0, <=0.4.0), a11ywatch_cli (>=0.0.16, <=0.10.15) +13686 more potentially affected by unknown CVE via h2 (>=0.1.26, <=0.3.27)
h2 CARGO version =0.1.26, =0.1.0, =0.0.16, =0.2.0, =0.1.0, =0.2.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0-beta.4, =0.1.0, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0258...
[SECURITY] Fedora 43 Update: rust-pretty-git-prompt-0.2.2-11.fc43
Your current git repository information inside a beautiful shell prompt...
[SECURITY] Fedora 43 Update: rust-bat-0.26.1-3.fc43
A cat1 clone with wings...
[SECURITY] Fedora 43 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc43
Full-featured terminal-based sequence editor for Git interactive rebase...
[SECURITY] Fedora 43 Update: rust-git-delta-0.19.1-7.fc43
A syntax-highlighting pager for git...
[SECURITY] Fedora 43 Update: rust-tokei-14.0.0-7.fc43
Count your code, quickly...
[SECURITY] Fedora 43 Update: rust-lsd-1.2.0-8.fc43
An ls command with a lot of pretty colors and some other stuff...
