legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

darwis-taxii

DARWIS TAXII A high-performance TAXII Trusted Automated eXchange of Indicator Information server written in Rust. Rust port of EclecticIQ OpenTAXII with full database compatibility. Features TAXII 1.x - Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 - Full REST API with...

cve-tarmageddon

CVE-2025-62518: TARmageddon This repository demonstrates a critical bug in tokio-tar and related async Rust tar libraries where PAX extended header size overrides are not applied before calculating the next header position. Bug Summary Root Cause: When processing tar files with PAX extended heade...

UBUNTU-CVE-2026-115382

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

GHSA-5WJR-9356-4WC8 Tokio: Race condition in `tokio::time::Interval`

Summary On the multi-threaded runtime, there is a race condition between Interval::polltick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and t...

Tokio: Race condition in `tokio::time::Interval`

Summary On the multi-threaded runtime, there is a race condition between Interval::polltick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and t...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567

The Tokio runtime for Rust applications (version 1.54.0 ) contains a race condition involving tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime's time driver. This flaw occurs when an internal timer entry is dropped without synchronization with the firing d...

CVE-2026-115567 Tokio: Race condition in `tokio::time::Interval`

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567 Tokio: Race condition in `tokio::time::Interval`

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

EUVD-2026-109110

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The rac...

PT-2026-122155

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The ra...

PT-2026-122419

Summary On the multi-threaded runtime, there is a race condition between Interval::poll tick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and...

Linux Distros Unpatched Vulnerability : CVE-2026-115382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic th...

CVE-2026-115382

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

CVE-2026-115382

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

CVE-2026-115382

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can specify a zero between-bytes-timeout request option, which is forwarded directly to a Tokio API that panics, crashing...

CVE-2026-115382

Wasmtime versions 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 are vulnerable to a denial-of-service flaw within the wasi:http implementation. The root cause is that guests can specify a zero between-bytes-timeout request option, which is passed directly to a Tokio API that triggers a panic. Thi...