afxdp (>=0.3.0, <=0.4.0), augmented_baseview (>=0.1.0, <=0.1.3) +17 more potentially affected by unknown CVE via rtrb (>=0.1.4, <=0.2.3)

rtrb CARGO version =0.1.4, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.1.7, =0.1.0, =0.6.4, =0.6.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0274...

Fedora 44 : python-fastar (2026-b1bcd1a48c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1bcd1a48c advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : rust-busd / rust-inferno / rust-quick-xml / rust-reqsign-aws-v4 / etc (2026-ffaebbf2f0)

"The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ffaebbf2f0 advisory. Update quick-xml for two security advisories, rebuild dependents, and update sandogasa to the latest https://rustsec.org/advisories/RUSTSEC-2026-0194.html...

ct-python (>=0.5.9, <=0.5.12), inline-python (>=0.14.0, <=0.14.4) +2 more potentially affected by unknown CVE via pyo3 (>=0.24.2, <=0.28.3)

pyo3 CARGO version =0.24.2, =0.5.9, =0.14.0, =0.14.0, =0.4.0, =0.8.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0176...

RUSTSEC-2026-0086 Host data leakage with 64-bit tables and Winch

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m9w2-8782-2946 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0089 Host panic when Winch compiler executes `table.fill`

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q49f-xg75-m9xw For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0085 Panic when lifting `flags` component value

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m758-wjhj-p3jq For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0055 `tokio-process` is unmaintained

The tokio-process crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

RUSTSEC-2026-0021 Panic adding excessive fields to a `wasi:http/types.fields` instance

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h For more information see the GitHub-hosted security advisory...

Fedora 42 : rust-sequoia-keystore-server / rust-sequoia-octopus-librnp / etc (2026-304a740a0b)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-304a740a0b advisory. Rebuild with sequoia-openpgp v2.1.0 to apply fixes for RUSTSEC-2025-0136 / CVE-2025-67897. Tenable has extracted the preceding description block directly fro...

remenu (>=0.0.3, <=0.0.5) potentially affected by unknown CVE via xcb (1.2.2)

xcb CARGO version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on xcb and may be impacted: - remenu =0.0.3, =0.0.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0051...

anchor-token (>=0.0.1, <=0.3.0), astro4nit (0.0.1) +56 more potentially affected by unknown CVE via cw0 (>=0.2.3, <=0.10.3)

cw0 CARGO version =0.2.3, =0.0.1, =0.3.1, =0.1.0, =0.3.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.6.0-beta1, =0.6.0-beta1, =0.2.0, =0.2.1, =0.2.0, =0.10.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0385...

Fedora 38 : clevis-pin-tpm2 / keyring-ima-signer / libkrun / rust-bodhi-cli / etc (2023-6215ea423b)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-6215ea423b advisory. Affected applications were rebuilt against version 0.10.60 of the the openssl crate the Rust bindings for OpenSSL to address two security advisories: -...

rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency

Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the ed25519-dalek crate, which is a dependency of the rusty-paseto crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of ed25519-dalek prior to v2.0. These versions expose an unsafe AP...

aluasm (0.1.0), alure (0.1.0) +235 more potentially affected by unknown CVE via secp256k1 (>=0.15.3, <=0.21.3)

secp256k1 CARGO version =0.15.3, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.20.0, =0.1.1, =1.0.0-beta.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0070...

RUSTSEC-2022-0102 Out of bounds read/write with zero-memory-pages configuration

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-44mr-8vmm-wjhg. For more information see the GitHub-hosted security advisory...

RUSTSEC-2022-0095 Miscompilation of `i8x16.swizzle` and `select` with v128 inputs

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jqwc-c49r-4w2x. For more information see the GitHub-hosted security advisory...

a14_cargo_io (0.1.0), abk (>=0.1.0, <=0.1.1) +261 more potentially affected by unknown CVE via dotenv (>=0.4.0, <=0.15.0)

dotenv CARGO version =0.4.0, =0.1.0, =0.0.0, =0.2.0, =0.2.0, =0.1.0, =0.5.2, =0.2.0, =0.5.0, =0.9.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0141...

GHSA-V5M7-53CV-F3HX crossbeam-channel Undefined Behavior before v0.4.4

Impact The affected version of this crate's the bounded channel incorrectly assumes that Vec::fromiter has allocated capacity that same as the number of iterator elements. Vec::fromiter does not actually guarantee that and may allocate extra memory. The destructor of the bounded channel...

RUSTSEC-2021-0103 Partial read is incorrect in molecule

Anyone who uses totalsize.. function to partial read the length of any FixVec will get an incorrect result, due to an incorrect implementation. This has been resolved in the 0.7.2 release...