RUSTSEC-2026-0088 Data leakage between pooling allocator instances

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-6wgr-89rj-399p For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0092 Panic when transcoding misaligned component model UTF-16 strings

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jxhv-7h78-9775 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0085 Panic when lifting `flags` component value

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m758-wjhj-p3jq For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0086 Host data leakage with 64-bit tables and Winch

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m9w2-8782-2946 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0089 Host panic when Winch compiler executes `table.fill`

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q49f-xg75-m9xw For more information see the GitHub-hosted security advisory...

Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xx5w-cvp6-jv83 For more information see the GitHub-hosted security advisory...

Out-of-bounds write or crash when transcoding component model strings

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-394w-hwhg-8vgm For more information see the GitHub-hosted security advisory...

Improperly masked return value from `table.grow` with Winch compiler backend

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-f984-pcp8-v2p7 For more information see the GitHub-hosted security advisory...

Panic when lifting `flags` component value

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m758-wjhj-p3jq For more information see the GitHub-hosted security advisory...

Fedora: Security Advisory (FEDORA-2026-334414b5e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

arctk (>=0.12.7, <=1.0.16), azure-functions (>=0.1.1, <=0.7.0) +29 more potentially affected by unknown CVE via tokio-executor (>=0.1.10, <=0.2.0-alpha.6)

tokio-executor CARGO version =0.1.10, =0.12.7, =0.1.1, =0.7.0, =0.1.0, =0.1.0, =0.3.0-alpha.2.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0063...

RUSTSEC-2026-0055 `tokio-process` is unmaintained

The tokio-process crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

ale_python_parser (0.1.0), anni-repo (>=0.2.0, <=0.4.1) +105 more potentially affected by CVE-2026-32829 via lz4_flex (>=0.7.5, <=0.10.0)

lz4flex CARGO version =0.7.5, =0.2.0, =0.1.0, =0.0.1, =0.1.3, =0.0.1, =0.2.0, =0.4.0, =0.12.1, =1.0.0-beta.1, =0.2.5, =0.2.7 - dekoder 0.1.0 - diamond-types 1.0.0 and more Source cves: CVE-2026-32829 Source advisory: OSV:RUSTSEC-2026-0041...

adi (>=0.7.0, <=0.13.0-pre2), adi_gpu (>=0.7.0, <=0.11.0) +407 more potentially affected by unknown CVE via cgmath (>=0.1.5, <=0.18.0)

cgmath CARGO version =0.1.5, =0.7.0, =0.7.0, =0.8.0, =0.6.0, =0.5.3, =0.8.0, =0.1.0, =0.4.0, =0.2.0, =0.4.0, =0.5.0, =0.5.2, =0.1.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0197...

acril-http (0.1.0), ajars_surf (>=0.3.0, <=0.8.0) +133 more potentially affected by unknown CVE via http-types (>=1.3.1, <=2.12.0)

http-types CARGO version =1.3.1, =0.3.0, =0.0.1, =0.10.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =6.0.0, =0.1.1, =0.0.4, =0.0.18 - crudhenriquecapi 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0174...

RUSTSEC-2026-0021 Panic adding excessive fields to a `wasi:http/types.fields` instance

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h For more information see the GitHub-hosted security advisory...

Panic adding excessive fields to a `wasi:http/types.fields` instance

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h For more information see the GitHub-hosted security advisory...

Fedora 42 : atuin / bustle / envision / glycin / greetd / helix / etc (2026-6388b28850)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-6388b28850 advisory. - Update the time crate to version 0.3.47. - Update the time-macros crate to version 0.2.27. - Update the time-core crate to version 0.1.8. - Update...

Fedora: Security Advisory (FEDORA-2026-304a740a0b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : rust-sequoia-keystore-server / rust-sequoia-octopus-librnp / etc (2026-304a740a0b)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-304a740a0b advisory. Rebuild with sequoia-openpgp v2.1.0 to apply fixes for RUSTSEC-2025-0136 / CVE-2025-67897. Tenable has extracted the preceding description block directly fro...