RUSTSEC-2026-0383 Bundled root certificates allow trust in distrusted emSign intermediates

Affected versions include emSign ECC Root CA - G3, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well...

RUSTSEC-2026-0375 `wasi-http` p3: Guests can set incorrect content-length for spliced response bodies

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-9prg-84vf-g5fc For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0414 Exponential event growth with `ENABLE_WIKILINKS`

When Options::ENABLEWIKILINKS is enabled, a wikilink with a pipe separator and empty display text, such as a|, leaks its child node's sibling chain into the content that follows it. Each such link roughly doubles the number of events the parser yields for the rest of the document, so output grows...

RUSTSEC-2026-0373 Missing case-insensitive matching for CSS url function

URL filtering, such as relative URLs and URL scheme limits, is not always applied when CSS sanitization is used. When the inner URL is quoted, CSS url"" is matched case-sensitively, when it should be matched case-insensitively. As a result, while url"" gets the intended domain name filtering, URL...

RUSTSEC-2026-0391 Data from an abandoned stream leaks into the next stream on a reused context

The withcontext constructors of the stream encoders and decoders used the borrowed context as it was. When a stream was abandoned on a context, for example an encoder dropped before finish after an error, whatever it left there was carried into the next stream: the input buffered by the previous...

RUSTSEC-2026-0396 `Seekable` reads a NULL or out-of-bounds seek table

Seekable did not record whether it was initialized. On a fresh Seekable, or one whose initbuff failed, decompress, offsettoframeindex and framedecompressedsize made the C library read a NULL seek table. After a failed re-initialization, decompress returned data from the refused buffer using the...

RUSTSEC-2026-0393 Out-of-bounds read when training a dictionary from inconsistent sample sizes

ZDICTtrainFromBuffer is never told the length of the samples buffer. Before 0.4.10, zstd::dict::fromcontinuous initially traindict called it directly: up to 0.2.1 without checking the sample sizes against the buffer at all, and from 0.3.0 with a sum that wraps around when overflow checks are off,...

RUSTSEC-2026-0406 Use-after-free when changing a multithreaded context with an unfinished frame

When a multithreaded frame zstdmt feature, CParameter::NbWorkers is left unfinished, its jobs may still be running on the worker threads: the C library only waits for them when the next frame starts, or when the context is freed. A session reset makes the context accept changes again in the...

RUSTSEC-2026-0397 `OutBuffer::around_pos` exposes uninitialized memory

OutBuffer::aroundpos accepted a position past the initialized length of a Vec. The next streaming call then marked everything before the position as initialized, so safe code could read stale heap memory between the vector's previous length and that position. The flaw was corrected by zero-fillin...

RUSTSEC-2026-0405 Out-of-bounds read with an out-of-range `InBuffer::pos`

InBuffer's fields are public, so safe code can set pos past the end of src. The position was passed to the C library unchecked, and ZSTDseekablecompressStream, unlike the other streaming functions, does not validate it: it read past the end of the input slice, by up to the frame size, and...

RUSTSEC-2026-0370 `zvariant` is unmaintained

The zvariant crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its wire module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format. Users of the GVariant format should migrate to...

RUSTSEC-2026-0395 Use-after-free with `CParameter::StableInBuffer`

With CParameter::StableInBuffertrue experimental feature, the C library keeps a pointer to the input of one streaming call and reads from it in later calls, including flushstream and endstream, which take no input. An InBuffer only borrows its slice for one call, so safe code could free it in...

RUSTSEC-2026-0402 Heap buffer overflow in `CCtx::try_clone` on a multithreaded context

CCtx::tryclone experimental feature, deprecated copies tables sized from the context's applied parameters. Starting a multithreaded frame zstdmt feature replaces those parameters with the workers' without resizing the context's own tables, so after an abandoned single-threaded frame, the copy wro...

RUSTSEC-2026-0403 Uninitialized memory exposed when streaming decompression of a legacy frame fails

When decompression fails inside a legacy zstd v0.4 to v0.7 frame, the bundled zstd library reports the output buffer as fully written although nothing was written. DCtx::decompressstream committed that position even on error, and for a Vec destination this extended the vector's length over...

RUSTSEC-2026-0372 `zvariant_derive` is unmaintained

The zvariantderive crate is no longer maintained as a standalone crate. Its derive macros are provided by zbus starting with version 6.0.0. Users should migrate to zbus, with its default features disabled if they only need the D-Bus wire format...

RUSTSEC-2026-0398 `Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end

ZSTDseekabledecompress shortens the requested length to the end of the data without checking that the offset is before it. For an offset past the end, it returns a wrapped-around length without writing anything, and Seekable::decompress passed that length to Vec::setlen. With the seekable feature...

RUSTSEC-2026-0371 `zbus_names` is unmaintained

The zbusnames crate is no longer maintained as a standalone crate. It has been merged into zbus starting with version 6.0.0, as its names module. Users should migrate to zbus, with its default features disabled if they only need the D-Bus name types...

RUSTSEC-2026-0400 Use-after-free of a dictionary after a one-shot call on a context with an open stream

The one-shot DCtx and CCtx methods assumed the C library resets the context, but it leaves an open stream as it is. When a stream was left unfinished on a context, a one-shot call such as decompressusingdict could leave the context pointing at the dictionary borrowed for that call, and the next...

RUSTSEC-2026-0366 Stack overflow when parsing deeply nested input in pest_grammars

Impact In affected versions, parsing deeply nested input with pestgrammars::json::JsonParser can exhaust the native stack and abort the hosting process. Applications that accept attacker-controlled JSON without suitable resource limits may therefore be vulnerable to denial of service. The reporte...

RUSTSEC-2026-0404 Double free in `DCtx::try_clone`

DCtx::tryclone experimental feature, deprecated is a plain copy of the C context. A context owning a dictionary from loaddictionary, refprefix or initusingdict or a dictionary table refddict with RefMultipleDDicts ended up with both copies freeing it. A context cloned mid-frame resumed on...

RUSTSEC-2026-0401 Out-of-bounds read in `train_from_buffer` when sample sizes overflow

ZDICTtrainFromBuffer is never told the length of the samples buffer, so trainfrombuffer checked that the sample sizes add up to it. With overflow checks off, as in release builds, that sum wrapped around: sizes totalling 2^64 plus the buffer length passed the check, and the trainer read past the...

RUSTSEC-2026-0399 Use-after-free through `init_using_cdict` and `init_using_ddict`

CCtx::initusingcdict and DCtx::initusingddict experimental feature, deprecated took the dictionary as &CDict and &DDict with only 'b: 'a, so the dictionary itself could be dropped while the context still pointed at it. The same mistake in other constructors was fixed earlier . The flaw was...

RUSTSEC-2026-0363 Component-model handle tables are capped only per instance and charged to no limit

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q554-3cjc-rx7p For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0361 Panic when pending calls are run after a trap

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-hmwq-g22x-qjw5 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0357 Out-of-bounds zero-length stream writes can panic

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-93g3-36p8-x2gc For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0354 Host panic when component `call_async` is cancelled under some conditions

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3r89-v5mq-j5xf For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0349 Unauthenticated ServerHello can downgrade later connections to classical key exchange

The client recorded the server-selected key exchange group for each server name when processing the ServerHello, before the server was authenticated. This record is used to predict which key share to send in future ClientHellos to that server name. A network attacker can answer one connection...

RUSTSEC-2026-0352 Filesystem sandbox escape when renaming symlinks with trailing slashes

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m9f7-9w4p-gv38 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0351 `wasi-http`: Request with long url before query parameter crashes host

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-w36r-2hch-9xp9 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0348 Brotli certificate decompression can allocate up to 1 GiB before authentication

The built-in Brotli certificate decompressor enabled by the non-default brotli crate feature bounded the size of the decompressed output, but accepted a peer-selected history window. Brotli's large-window extension was enabled, so a five-byte header could cause an allocation of 1 GiB. A peer can...

RUSTSEC-2026-0358 Yielding in a component start function can lead to a host panic

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5hhx-4wrr-3j9g For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0356 Panic on erroneous call-to-host from guest realloc call

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-7v24-42x9-pxf7 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0347 Buffered application data sent to outer server after ECH rejection

When a server rejects Encrypted Client Hello ECH, the client completes the handshake using the outer ClientHello and authenticates the server against the ECH config's publicname. At the end of that handshake, rustls encrypted and queued any application data buffered via ClientConnection::writer...

RUSTSEC-2026-0362 Wasmtime may not properly enforce async-entrypoint requirement

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-vcg5-q8m5-8379 For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0364 Exception tags can cause host data structures to be unaligned

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p79w-pv2r-29qp For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0350 Guests can send absolute-form HTTP requests to different hosts

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-5qpp-g3j2-8frx For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0359 Stack overflow dropping a long chain of recursive types

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-wjc8-633q-pwxr For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0360 Overlapping string transcode in a fused adapter can panic

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-54p9-vhhq-8f7q For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0365 Remote DoS through unchecked `IdList` allocation in negentropy

Summary The negentropy crate is vulnerable to denial-of-service through an unchecked, peer-controlled ID count in reconciliation messages. With the std feature enabled, which is the default configuration, a small malformed message can trigger an enormous memory allocation and terminate the...

RUSTSEC-2026-0355 Panic viewing component model stream or future as the wrong type

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-63h4-6cx9-pjfj For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0353 Panic when invoking an async-lifted function via `call`

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m6w2-jwq2-cv2c For more information see the GitHub-hosted security advisory...

RUSTSEC-2026-0346 `Debug` impls for client session values expose TLS secrets

The Debug implementations of Tls12ClientSessionValue and Tls13ClientSessionValue were derived, and so included the TLS 1.2 master secret or TLS 1.3 resumption PSK in their output. Custom ClientSessionStore implementations that format these values with Debug for example, when logging could disclos...

RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety

tokio::io::unix::AsyncFd provides safe constructors new, withinterest, trynew, and trywithinterest that accept any T: AsRawFd rather than requiring proof of ownership or validity of the file descriptor. Because RawFd implements AsRawFd, safe code can construct an AsyncFd from an arbitrary or clos...

RUSTSEC-2026-0344 Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)

A crafted .zst input under 128 KB can force ruzstd to allocate several gigabytes at once, crashing the process with an out-of-memory condition. Since ruzstd is a decoder for untrusted input, a single small file is enough to take down anything decoding it. The compressed size of a block was capped...

RUSTSEC-2026-0369 ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

ZipStreamReader::extract applies Unix permissions through extracted symlinks without validating the symlink target stays within the destination For further details see: https://github.com/zip-rs/zip2/security/advisories/GHSA-4684-h2q9-2vcp...

RUSTSEC-2026-0335 Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

mykey implements MIKEY RFC 3830 for SRTP key exchange. Pre-shared key mode transmitted the TEK Generation Key TGK in the clear. MikeyMessage::newpskinit built its KEMAC payload with EncAlg::Null and placed the TGK in encdata verbatim. Anyone able to read a PSK-Init message therefore recovers the...

RUSTSEC-2026-0337 Poly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or more

Poly1305 in ic-cipher absorbs messages of 64 bytes or more four blocks at a time, summing four products before one reduction. From 0.2.5 to 0.2.19 the reduction kept its carries in 32-bit integers, which four summed products can overflow when the message's bytes are large. This affects Poly1305 a...

RUSTSEC-2026-0367 Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

The zip crate preserves privileged Unix permission bits SUID, SGID, and sticky bits from ZIP externalattributes during extraction, instead of masking them to safe permission bits. If a privileged process for example, root in an installer, CI/CD pipeline, or container build extracts an...

RUSTSEC-2026-0368 zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory

In zip 9.0.0-pre2, ZipArchive::extract creates a symbolic link from an archive entry after validating only the output entry path. The link target bytes are passed directly to the platform symlink API, so a malicious archive can create an entry inside the destination that resolves to an...

RUSTSEC-2026-0336 MIKEY message MAC is never verified on receive, so forged messages are accepted

mykey implements MIKEY RFC 3830 for SRTP key exchange. No receive path verified the MIKEY message authentication code. crypto::verifymac existed and was correct, but it was called only from unit tests — neither MikeyMessage::frombytes nor MikeyMessage::completepsk invoked it. newpskinit computed ...