afxdp (>=0.3.0, <=0.4.0), augmented_baseview (>=0.1.0, <=0.1.3) +17 more potentially affected by unknown CVE via rtrb (>=0.1.4, <=0.2.3)

rtrb CARGO version =0.1.4, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.1.7, =0.1.0, =0.6.4, =0.6.7 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0274...

Fedora 44 : python-nh3 / rust-ammonia (2026-61f0d68398)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-61f0d68398 advisory. - Update the ammonia crate to version 4.1.4. - Rebuild nh3 to apply fixes for RUSTSEC-2026-0193 and RUSTSEC-2026-0213. Tenable has extracted the preceding...

RUSTSEC-2026-0223 Preemption and traps during bulk operations enable breaking internal VM state

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-2hw9-mc66-jc2q For more information see the GitHub-hosted security advisory...

Stores can mix up type indices between engines

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hgjw-h833-99q9 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0257 Unix `BROWSER` handling allows browser argument injection

On Unix platforms handled by src/unix.rs, affected versions substitute the caller-supplied URL into the BROWSER environment-variable template before tokenizing the resulting string with splitasciiwhitespace. If an application passes an attacker-controlled non-HTTPS URL whose parsed form retains...

abscissa (>=0.4.0, <=0.6.0-pre.1), abscissa_core (>=0.4.0, <=0.6.0-pre.1) +83 more potentially affected by unknown CVE via gumdrop (>=0.1.0, <=0.8.1)

gumdrop CARGO version =0.1.0, =0.4.0, =0.4.0, =0.6.0-pre.1, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.0.6, =1.0.8, =1.0.9, =1.0.8, =1.0.9, =1.0.6, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0214...

Fedora 43 : rust-opendal (2026-5e3ab17662)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5e3ab17662 advisory. Update quick-xml to 0.41 RUSTSEC-2026-0194, RUSTSEC-2026-0195 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 43 : rust-cargo-rpmstatus (2026-6d5a7be3b9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6d5a7be3b9 advisory. Update to 0.2.5 with dependency updates only, and further update some dependencies. Particularly, quick- xml 0.41 fixes RUSTSEC-2026-0194 and...

Fedora 44 : python-bcrypt (2026-65b6511854)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-65b6511854 advisory. Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177 Tenable has extracted the preceding description block directly from the Fedora securit...

Fedora 44 : rust-cargo-rpmstatus (2026-08f5aab9ed)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-08f5aab9ed advisory. Update to 0.2.5 with dependency updates only, and further update some dependencies. Particularly, quick- xml 0.41 fixes RUSTSEC-2026-0194 and...

Fedora 44 : breezy (2026-c872d91489)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c872d91489 advisory. Allow PyO3 0.29, which fixes RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Update to 3.3.21, including upstream fixes for compatibility with dulwich 0.25 and late...

Fedora 44 : python-jiter / rust-jiter (2026-a7f46c285f)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a7f46c285f advisory. Update rust-jiter to 0.16.0, adding a serde Deserializer implementation; update python-jiter to match. Both packages now use PyO3 0.29, with fixes for...

Fedora 44 : python-nh3 (2026-5ebb12f543)

"The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ebb12f543 advisory. Update to 0.3.6 Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Fedora Security Advisory FEDORA-2026-5ebb12f543...

Fedora 43 : python-cramjam (2026-07ef57edc0)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-07ef57edc0 advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : python-rignore (2026-b77adbb5ea)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b77adbb5ea advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 44 : python-fastar (2026-b1bcd1a48c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-b1bcd1a48c advisory. Update to PyO3 0.29, with fixes for RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 45 : python-safetensors / rust-safetensors (2026-9db41d0ada)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-9db41d0ada advisory. Update safetensors to 0.8.0 and build the Python extension using PyO3 0.29, which fixes RUSTSEC-2026-0176 and RUSTSEC-2026-0177. Tenable has extracted the...

Fedora 44 : mir / rust-ashpd / rust-busd / rust-gtk4-macros / rust-inferno / etc (2026-b25dca4806)

"The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-b25dca4806 advisory. Update quick-xml for two security advisories, rebuild dependents, and update sandogasa to the latest https://rustsec.org/advisories/RUSTSEC-2026-0194.html...

Fedora 43 : rust-busd / rust-inferno / rust-quick-xml / rust-reqsign-aws-v4 / etc (2026-ffaebbf2f0)

"The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ffaebbf2f0 advisory. Update quick-xml for two security advisories, rebuild dependents, and update sandogasa to the latest https://rustsec.org/advisories/RUSTSEC-2026-0194.html...

aabb_physics (>=0.1.0, <=0.1.1), aad (>=0.2.1, <=0.9.0) +1961 more potentially affected by unknown CVE via ttf-parser (>=0.1.0, <=0.25.1)

ttf-parser CARGO version =0.1.0, =0.1.0, =0.2.1, =0.1.0, =0.11.0, =0.9.0, =0.1.0, =0.0.2, =0.1.2, =0.1.1, =0.1.26, =0.1.23, =0.1.9, =0.2.0, =0.0.10, =0.0.18 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0192...