RUSTSEC-2026-0445 Degraded secret zeroization capabilities

Versions 0.11.0 and 0.11.1 of vodozemac have degraded secret zeroization capabilities, due to changes in third-party cryptographic dependencies chacha-20poly1305, sha2, hmac, which moved secret zeroization capabilities behind a feature flag while vodozemac disabled the default feature set. Impact...

RUSTSEC-2026-0455 Large-window Brotli bodies bypass decompression memory limits

With the compress-brotli feature enabled, the decoder accepts the non-standard large-window Brotli format. A crafted stream can cause its internal buffer to grow to about 1 GiB before the decoded output reaches the configured size limit. An 850-byte request can cause this allocation, and concurre...

RUSTSEC-2026-0447 Compressed request bodies can exhaust memory before extractor limits apply

Body extractors do not pass their size limits to the decompression layer. A small compressed request can therefore cause a large allocation before the extractor rejects the decoded body. A remote attacker can use this to exhaust memory or CPU resources and cause denial of service. This affects...

RUSTSEC-2026-0446 Request smuggling through malformed chunked request trailers

The HTTP/1 chunked decoder accepts a bare line feed after the final chunk as the start of a trailer instead of rejecting the malformed request. When an upstream proxy reuses a connection and either pipelines the requests or does not take steps to validate the chunked stream, the decoder can consu...

RUSTSEC-2026-0451 Degraded secret zeroization capabilities

In version 0.11.1 and earlier of vodozemac, the Olm root key ratchet did not zeroize its HKDF output after use. Each ratchet step left a copy of the new root key and chain key in freed heap memory. Impact An attacker who can read the process's memory, for example through a separate...

RUSTSEC-2026-0448 Unbounded decompression can exhaust memory and CPU resources

The encoding::Decoder stream can expand compressed input into a large output buffer before a caller can enforce its body size limit. An attacker who controls a compressed request or response can cause excessive memory allocation and CPU use, resulting in denial of service. This affects applicatio...

RUSTSEC-2026-0443 Hidden file disclosure through Windows short names

On Windows volumes with 8.3 short names, actixfiles::Files can serve hidden files through their short-name aliases. The default path check rejects segments that start with a dot, but an alias such as ENV1 or GIT1 passes this check. A remote client can read files such as .env or .git/config in the...

RUSTSEC-2026-0449 `ocipkg` is unmaintained

The author of ocipkg has archived the repository and declared the crate no longer maintained. Version 0.4.1 is stated to be the final release. "No further updates, including security fixes, are planned." Alternatives - For interacting with OCI registries, the maintainer suggests the ORAS project'...

RUSTSEC-2026-0440 `astral-tokio-tar` is unmaintained

Astral ended maintenance of astral-tokio-tar on November 3, 2026. All versions of the crate are deprecated and unmaintained. For strict tar encoding and decoding, Astral recommends tar-codec as a possible replacement. 0.7.1 release: https://github.com/astral-sh/tokio-tar/releases/tag/v0.7.1...

RUSTSEC-2026-0452 Out-of-bounds read when decoding internal keys shorter than 16 bytes

InternalKeyRef::fromencoded is a safe constructor whose only length check is debugassert!encoded.len = 16, which is compiled out in release builds. Its accessors perform unchecked length arithmetic on the slice: userkey slices &encoded..len - 16, trailer/seqnum pass len - 16 and timestamp passes...

RUSTSEC-2026-0454 Data race and double free via unsound `Send`/`Sync` in `reblessive`

dbs::Executor drives every SurrealQL statement through reblessive::tree::TreeStack. In reblessive 0.4.3 the runtime types unconditionally assert Send/Sync unsafe impl Send/Sync for Stack, TreeStack and Runner, while the public entry points accept any future without a Send bound and store it...

RUSTSEC-2026-0435 Unbounded memory allocation in `thrift` binary protocol `read_bytes`

Affected versions of the thrift crate size a buffer directly from an attacker-controlled 4-byte length read off the wire, before reading any payload and with no upper bound, allowing a hostile peer to force a large eager allocation or an immediate abort denial of service, CWE-400 / CWE-789. This ...

RUSTSEC-2026-0442 Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads

Improper validation of RunEndEncoded arrays via ArrayData::validatevalues can allow reading data beyond the bounds of the child values array when reading the last value via APIs such as TypedRunArray::value. Patched versions now properly validate the contents of RunEndEncoded arrays to prevent...

RUSTSEC-2026-0431 Unbounded memory allocation in `evtx` parsing a `.wevtcache` file

Affected versions of evtx did not bound a per-entry payload length read from a .wevtcache file before allocating a buffer sized from it, allowing a tiny crafted file to force a multi-gigabyte allocation and abort the process out-of-memory denial of service, CWE-400. Details In...

RUSTSEC-2026-0430 Path traversal in `rio-vt` Kitty graphics protocol handler allows out-of-bounds file delete (and read)

The Kitty graphics protocol handler in rio-vt builds a filesystem path from an attacker-controlled APC escape sequence and, for the temp-file medium, only checks that the path contains the substring "tty-graphics-protocol" before it opens, reads, and removefiles it. There is no .. rejection and n...

RUSTSEC-2026-0434 `ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

ant-releases downloads and unpacks release archives from the safenetwork / autonomi repositories. When it extracts an archive, it builds each output path by joining the archive entry's own name onto the destination directory, with no check for .. or absolute components — a classic "zip-slip" path...

RUSTSEC-2026-0432 `codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)

codeq is a serialization library whose Decode trait reads length-prefixed values. For String and Vec, the length-prefixed Decode implementations read a 4-byte big-endian length and allocate a buffer of that size before reading the payload. Because the declared length is taken straight from the...

RUSTSEC-2026-0426 LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time

Summary On targets that do not have a conditional move/select operations, LLVM compiles the internal conditionalsubu32 function, into one that will contain a conditional jump on secret-dependent data, which could leak information about encapsulation and signing keys. conditionalsubu32 is used...

RUSTSEC-2026-0428 BLAKE2b produces wrong tag when using `reset()` with a different-length key

Summary hazardous::mac::blake2b::Blake2b::reset does not correctly reset the state when a key is supplied that has a different length than the one used upon initialization with hazardous::mac::blake2b::Blake2b::new, because it errorneously uses a cached length. Impact Initialization...

RUSTSEC-2026-0425 `nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)

Decoder::unpack does not safely contain the paths it extracts, so a malicious NAR archive can create files outside the destination directory — a path traversal CWE-22. In src/dec.rs Decoder::unpack: - A symlink entry's target is written without checking where it points src/dec.rs:153, so the...

RUSTSEC-2026-0450 `ocipkg`: unpacking an OCI archive can write and delete files outside the local image store (path traversal)

When ocipkg unpacks an OCI archive, the destination directory is derived from the image name, which ocipkg reads from the archive's own index.json org.opencontainers.image.ref.name. That name is attacker-controlled, and ImageName::parse accepts a hostname of .., so the computed destination escape...

RUSTSEC-2026-0420 wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmmr-87qq-258j For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0422 Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3982-jqvv-277m For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0427 `sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)

SafeReleaseRepoActions::extractreleasearchive builds each output path from the raw archive entry name and writes to it with no traversal check, so a malicious release archive can create directories and write files outside the destination directory, a "zip-slip" / path traversal CWE-22 / CWE-23. I...

RUSTSEC-2026-0421 wasi-http p2: outgoing content-length can be invalid or not match body

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-h4wp-g4x3-7398 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0424 Unchecked memory usage in transferring borrowed resources between components

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-6fr9-xmw9-5352 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0423 Cross-engine type confusion with host-created struct-types-with-supertypes

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-qw58-7h65-crq2 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0419 Unbounded memory use on large request bodies

The makegraphqlfilter and makegraphqlfiltersync filters of juniperwarp read the whole body of a POST request into memory before they parsed the body. The filters had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request needs no...

RUSTSEC-2026-0418 libz-sys build script leaks environment variables in the build directory

The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...

RUSTSEC-2026-0415 Unbounded memory use on large request bodies

The graphql and graphqlsync functions of juniperhyper read the whole body of a POST request into memory before they parsed the body. The functions had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request needs no authentication...

RUSTSEC-2026-0416 Stack overflow on deeply nested GraphQL documents

The parser of juniper called itself once for each level of nesting in a GraphQL document. The parser had no limit on the nesting depth. Deeply nested selection sets, input values, and list types thus overflowed the stack of the thread that parsed the document. Validation and execution followed...

RUSTSEC-2026-0417 Excessive CPU and memory use on crafted GraphQL documents

Several parts of juniper did work that grew faster than the size of the GraphQL document. A small document could thus use seconds of CPU time or gigabytes of memory. The requests need no authentication. - OverlappingFieldsCanBeMerged compared all pairs of fields with the same response name. The...

RUSTSEC-2026-0433 Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`

With Options::ENABLEWIKILINKS, handlewikilink builds a wikilink's target from the raw text of its body: scanwikilinkpipe walks it looking for |, then contains'\0' and fromreplacenuls walk it again. Once a wikilink is created, disablealllinks only disables Link entries, so every enclosing ! stays...

RUSTSEC-2026-0436 Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input

The Compound File Binary OLE2 parser src/cfb.rs, used when reading .xls and .xlsb workbooks and when extracting VBA projects from .xlsx, can panic or allocate without bound on crafted input. Both are reachable through the public reader API openworkbook, Xls::new, Xlsb::new on an attacker-supplied...

RUSTSEC-2026-0412 Arbitrary code execution when rerunning tests from a portable recording

Summary Nextest versions between 0.9.125 and 0.9.149 inclusive allow the cargo nextest run --rerun or -R command with a malicious portable recording to run arbitrary code during the build. The result is arbitrary code execution with the privileges of the user running cargo nextest. This...

RUSTSEC-2026-0409 Use-after-free from a comparator that answers inconsistently

OrderedSkipList, SkipSet and SkipMap can free a node that is still linked when a Comparator or Ord implementation gives different answers for the same pair of values during one mutating call. A later call reads the freed memory CWE-416. A safe impl Ord with the default comparator is enough to rea...

RUSTSEC-2026-0385 Non-constant-time mask generation and `u128` comparisons

Summary The ctutils::Choice type has mask generation functions for each unsigned integer size u8, u16, u32, u64, u128. These are const fn and therefore can't reuse the asm!-backed mask generation in the cmov crate that's otherwise used to ensure constant-time. In releases prior to v0.4.4, the...

RUSTSEC-2026-0387 Multiple timing variability issues in operations intended to be constant-time

Summary Several operations intended to be constant-time could execute secret-dependent branches, depending on the compiler and target CPU. These include subtraction, zero counting, division, and Montgomery multiplication. Additionally, UintRef equality could terminate at the first unequal limb, a...

RUSTSEC-2026-0429 zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size

ZipArchive::extract sizes the symlink-target buffer from the uncompressed size declared in the central directory record, before reading a single byte of entry data: rust let mut target = Vec::withcapacityfile.size as usize; Both inputs are attacker-controlled. ZipFile::size returns uncompressedsi...

RUSTSEC-2026-0411 Out-of-bounds read in `Log2Cache::nlog2n()`, `nlog2n_difference()` and `plog2p()`

Log2Cache::newn fills its three tables with entries for 0..=n, but the three accessor methods index those tables with getunchecked on a value the caller supplies. Nothing bounds the argument and nothing documents a bound, so any value above the n the cache was built with reads past the end of the...

RUSTSEC-2026-0407 SSRF and local file disclosure via unvalidated URLs

Applications that pass attacker-controlled URLs to webpage versions before 2.1.0 may be vulnerable to server-side request forgery SSRF or local file disclosure. HTTP::fetch and Webpage::fromurl passed URLs to libcurl without restricting the URL scheme or validating the resolved destination IP...

RUSTSEC-2026-0384 Race condition in `tokio::time::Interval` on Tokio v1.54.0

Summary On the multi-threaded runtime, there is a race condition between Interval::polltick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::polltick including .tick.await and t...

RUSTSEC-2026-0382 Certificate verification may accept distrusted intermediates

Affected versions may accept certificate paths containing distrusted emSign intermediate public keys when the configured trust anchors allow such paths. The private keys corresponding to these intermediates are now well known. Versions 0.103.16 and 0.104.0-alpha.8 reject paths containing these...

RUSTSEC-2026-0379 Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-mghf-wjfp-p5xm For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0377 `wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-jxcf-8qw5-5c33 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0380 Bit-packing in Cranelift compiler causes silent overflow and miscompilation

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-897f-g5gm-fmxm For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0378 Panic lowering a host-created component model stream into a guest that expects a different payload type

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9pvw-hwfg-92h5 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0376 `wasi-http`: Guests can add conflicting content lengths to messages

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-r8xh-cgf7-392j For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0453 Use-after-free in KV backends via leaked `affinitypool::spawn_local` future

The kv-mem, kv-surrealkv and kv-rocksdb backends move non-'static borrowed state into affinity-pool closures through affinitypool::spawnlocal: a tokio::sync::MutexGuard, &Transaction, &mut ScanStateKeys/Vals, &mut dyn KeyVisitor/ValVisitor, RwLockReadGuard, and a ReadOptions holding a raw...

RUSTSEC-2026-0381 Bundled root certificates allow trust in distrusted emSign intermediates

Affected versions include emSign ECC Root CA - G3, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well...