Lucene search
+L
RustsecMost viewed

1224 matches found

RustSec
RustSec
added 2026/04/14 12:00 p.m.24 views

Name constraints for URI names were incorrectly accepted

Name constraints for URI names were ignored and therefore accepted. Note this library does not provide an API for asserting URI names, and URI name constraints are otherwise not implemented. URI name constraints are now rejected unconditionally. Since name constraints are restrictions on otherwis...

5.4AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/04/09 12:00 p.m.24 views

Improperly masked return value from `table.grow` with Winch compiler backend

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-f984-pcp8-v2p7 For more information see the GitHub-hosted security advisory...

7.5CVSS5.9AI score0.00214EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/04/07 12:00 p.m.24 views

zantetsu-ffi is unmaintained

The zantetsu-ffi crate is no longer maintained. The Node.js, Python, and C FFI bindings it provided were removed as part of the zantetsu 0.2 release, which refocused the project on its core Rust library. A tombstone version 0.2.0 has been published and 0.1.4 has been yanked. There is no replaceme...

5.8AI score
SaveExploits0
RustSec
RustSec
added 2026/04/07 12:00 p.m.24 views

zantetsu-trainer is unmaintained

The zantetsu-trainer crate is no longer maintained. The ML training infrastructure it contained was removed as part of the zantetsu 0.2 release, which replaced the neural parser with a pure heuristic engine. A tombstone version 0.2.0 has been published and 0.1.4 has been yanked. There is no...

5.8AI score
SaveExploits0
RustSec
RustSec
added 2026/03/20 12:00 p.m.24 views

`tokio-udp` is unmaintained

The tokio-udp crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

5.7AI score
SaveExploits0
RustSec
RustSec
added 2026/03/20 12:00 p.m.24 views

`tokio-tcp` is unmaintained

The tokio-tcp crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

5.7AI score
SaveExploits0
RustSec
RustSec
added 2026/03/20 12:00 p.m.24 views

`tokio-process` is unmaintained

The tokio-process crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

5.7AI score
SaveExploits0
RustSec
RustSec
added 2026/03/04 12:00 p.m.24 views

Panic in Standalone MAC Operations

An incorrect constant for the key length in libcrux-poly1305 caused the standalone MAC function libcruxpoly1305::mac to always panic with an out-of-bounds memory access. Impact Applications wishing to use libcrux-poly1305 as a standalone MAC would experience panics. The use of libcrux-poly1305 in...

5.8AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/03/04 12:00 p.m.24 views

HTTP Request Smuggling via Premature Upgrade

Pingora versions prior to 0.8.0 would immediately forward bytes following a request with an Upgrade header to the backend, without waiting for a 101 Switching Protocols response. This allows an attacker to smuggle requests to the backend and bypass proxy-level security controls. This vulnerabilit...

9.3CVSS6AI score0.00666EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/02/24 12:00 p.m.24 views

Guest-controlled resource exhaustion in WASI implementations

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-852m-cvvp-9p4w For more information see the GitHub-hosted security advisory...

6.9CVSS5.3AI score0.00345EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/02/24 12:00 p.m.24 views

Panic adding excessive fields to a `wasi:http/types.fields` instance

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-243v-98vx-264h For more information see the GitHub-hosted security advisory...

7.5CVSS5.3AI score0.00466EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/02/05 12:00 p.m.24 views

Nonce Reuse in HPKE Context

The sequence number that is used to compute the AEAD nonce when using a re-usable HPKE context is incremented after each seal or open operation. This sequence number was stored as a u32 and used regular addition on u32 for the increment, meaning in release mode it would silently wrap around to 0...

5.8AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/02/03 12:00 p.m.24 views

Integer overflow in `BytesMut::reserve`

In the unique reclaim path of BytesMut::reserve, the condition rs if vcapacity = newcap + offset uses an unchecked addition. When newcap + offset overflows usize in release builds, this condition may incorrectly pass, causing self.cap to be set to a value that exceeds the actual allocated capacit...

7.5CVSS5.4AI score0.00558EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2025/10/18 12:00 p.m.24 views

`unic-ucd-name_aliases` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

7AI score
SaveExploits0
RustSec
RustSec
added 2025/10/18 12:00 p.m.24 views

`unic-char-basics` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained...

7AI score
SaveExploits0
RustSec
RustSec
added 2025/10/18 12:00 p.m.24 views

`unic-emoji-char` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties...

7AI score
SaveExploits0
RustSec
RustSec
added 2025/04/01 12:00 p.m.24 views

Risk of buffer overflow in `PyString::from_object`

PyString::fromobject took &str arguments and forwarded them directly to the Python C API without checking for terminating nul bytes. This could lead the Python interpreter to read beyond the end of the &str data and potentially leak contents of the out-of-bounds read by raising a Python exception...

6.9AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2024/12/12 12:00 p.m.24 views

Crash due to uncontrolled recursion in protobuf crate

Affected version of this crate did not properly parse unknown fields when parsing a user-supplied input. This allows an attacker to cause a stack overflow when parsing the mssage on untrusted data...

5.9CVSS7.4AI score0.00415EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2023/11/15 12:00 p.m.24 views

`win-base64-rs` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

5.9AI score
SaveExploits0
RustSec
RustSec
added 2023/05/16 12:00 p.m.24 views

crate has been renamed to `crypto_secretbox`

This crate has been forked/renamed from xsalsa20poly1305 to cryptosecretbox. The new repository location is at:...

6.9AI score
SaveExploits0
RustSec
RustSec
added 2023/02/24 12:00 p.m.24 views

Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)

The removedirall crate is a Rust library that offers additional features over the Rust standard library fs::removedirall function. It was possible to trick a privileged process doing a recursive delete in an attacker controlled directory into deleting privileged files, on all operating systems. F...

0.6AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2022/02/28 12:00 p.m.24 views

Miscomputation when performing AES encryption in rust-crypto

The following Rust program demonstrates some strangeness in AES encryption - if you have an immutable key slice and then operate on that slice, you get different encryption output than if you operate on a copy of that key. For these functions, we expect that extending a 16 byte key to a 32 byte k...

7.3AI score
SaveExploits0
RustSec
RustSec
added 2021/07/25 12:00 p.m.24 views

Process crashes when the cell used as DepGroup is not alive

It's easy to create a malign transaction which uses the dead cell as the DepGroup in the DepCells. The transaction can crash all the receiving nodes...

7.8CVSS2AI score0.01088EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2021/07/25 12:00 p.m.24 views

Remote memory exhaustion in ckb

In the ckb sync protocol, SyncState maintains a HashMap called 'misbehavior' that keeps a score of a peer's violations of the protocol. This HashMap is keyed to PeerIndex an alias for SessionId, and entries are never removed from it. SessionId is an integer that increases monotonically with every...

7.8CVSS1.5AI score0.01466EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2021/07/07 12:00 p.m.24 views

Lenient `hyper` header parsing of `Content-Length` could allow request smuggling

hyper's HTTP header parser accepted, according to RFC 7230, illegal contents inside Content-Length headers. Due to this, upstream HTTP proxies that ignore the header may still forward them along if it chooses to ignore the error. To be vulnerable, hyper must be used as an HTTP/1 server and using ...

5.3CVSS0.3AI score0.00886EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2021/05/07 12:00 p.m.24 views

anymap is unmaintained.

The anymap crate does not appear to be maintained, and the most recent published version 0.12.1 includes a soundness bug. This has been fixed a few years ago, but was never released...

9.8CVSS3.3AI score0.01441EPSS
SaveExploits1
RustSec
RustSec
added 2021/02/28 12:00 p.m.24 views

project abandoned; migrate to the `aes-siv` crate

The Miscreant project has been abandoned and archived. The Rust implementation has been adapted into the new aes-siv crate which implements both the AES-CMAC-SIV and AES-PMAC-SIV constructions: Please migrate to the aes-siv crate. Alternatively see the aes-gcm-siv crate for a newer, faster...

0.6AI score
SaveExploits0
RustSec
RustSec
added 2021/02/03 12:00 p.m.24 views

Window can read out of bounds if Read instance returns more bytes than buffer size

rdiff performs a diff of two provided strings or files. As part of its reading code it uses the return value of a Read instance to set the length of its internal character vector. If the Read implementation claims that it has read more bytes than the length of the provided buffer, the length of t...

7.5CVSS2AI score0.01059EPSS
SaveExploits0
RustSec
RustSec
added 2021/01/07 12:00 p.m.24 views

`Read` on uninitialized buffer may cause UB ( `read_entry()` )

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. There are two of such cases gooffsetlog::readentry & offsetlog::readentry. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect...

9.8CVSS3.4AI score0.01191EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2021/01/04 12:00 p.m.24 views

kamadak-exif DoS with untrusted PNG data

Attacker crafted data can cause a infinite loop leading to DoS if used with untrusted data...

6.5CVSS2.5AI score0.01515EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2021/01/02 12:00 p.m.24 views

reading on uninitialized buffer can cause UB (`impl<R> BufRead for GreedyAccessReader<R>`)

Affected versions of this crate creates an uninitialized buffer and passes it to user-provided Read implementation. This is unsound, because it allows safe Rust code to exhibit an undefined behavior read from uninitialized memory. The flaw was corrected in version 0.1.1 by zero-initializing a new...

9.1CVSS3.4AI score0.01642EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2020/12/31 12:00 p.m.24 views

InputStream::read_exact : `Read` on uninitialized buffer causes UB

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

9.8CVSS3.8AI score0.01191EPSS
SaveExploits0
RustSec
RustSec
added 2020/12/18 12:00 p.m.24 views

ShmWriter allows sending non-Send type across threads

Affected versions of this crate implement Send for ShmWriter without requiring H: Send. This allows users to send H: !Send to other threads, which can potentially lead to data races and undefined behavior...

8.1CVSS3.6AI score0.01249EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2020/12/10 12:00 p.m.24 views

Soundness issue with base::Error

base::Error type contains public field named ptr. With this definition, it is possible to create a base::Error with an invalid pointer and trigger memory safety errors such as use-after-free or double-free with safe Rust. The users of xcb crate are advised not to manipulate the field...

5.5CVSS2AI score0.00401EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2020/11/15 12:00 p.m.24 views

Queue<T> should have a Send bound on its Send/Sync traits

Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

8.1CVSS3.8AI score0.01098EPSS
SaveExploits1
RustSec
RustSec
added 2020/11/10 12:00 p.m.24 views

`Decoder<R>` can carry `R: !Send` to other threads

Affected versions of this crate implements Send for Decoder for any R: Read. This allows Decoder to contain R: !Send and carry move it to another thread. This can result in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard from a thread that didn't lock...

8.1CVSS1.7AI score0.00766EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2020/11/09 12:00 p.m.24 views

TreeFocus lacks bounds on its Send and Sync traits

Affected versions of im contains TreeFocus that unconditionally implements Send and Sync. This allows a data race in safe Rust code if TreeFocus is extracted from Focus type. Typical users that only use Focus type are not affected...

4.7CVSS4AI score0.00332EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2020/09/25 12:00 p.m.24 views

Insufficient size checks in outgoing buffer in ws allows remote attacker to run the process out of memory

Affected versions of this crate did not properly check and cap the growth of the outgoing buffer. This allows a remote attacker to take down the process by growing the buffer of their single connection until the process runs out of memory it can allocate and is killed. The flaw was corrected in t...

7.5CVSS4AI score0.01336EPSS
SaveExploits0
RustSec
RustSec
added 2020/05/01 12:00 p.m.24 views

`net2` crate has been deprecated; use `socket2` instead

The net2 crate has been deprecated and users are encouraged to considered socket2 instead...

2.3AI score
SaveExploits0
RustSec
RustSec
added 2020/04/23 12:00 p.m.24 views

Library exclusively intended to obfuscate code.

This crate allows you to write safe functions with unsafe bodies without the unsafe keyword. The value this adds is questionable, and hides unsafe usages from naive analysis...

2.1AI score
SaveExploits0
RustSec
RustSec
added 2019/07/04 12:00 p.m.24 views

MultiDecoder::read() drops uninitialized memory of arbitrary type on panic in client code

Affected versions of libflate have set a field of an internal structure with a generic type to an uninitialized value in MultiDecoder::read and reverted it to the original value after the function completed. However, execution of MultiDecoder::read could be interrupted by a panic in caller-suppli...

9.8CVSS3.1AI score0.02458EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2018/12/20 12:00 p.m.24 views

Flaw in streaming state reset() functions can create incorrect results.

Affected versions of this crate did not properly reset a streaming state. Resetting a streaming state, without finalising it first, creates incorrect results. The flaw was corrected by not first checking if the state had already been reset, when calling reset...

7.5CVSS3.3AI score0.01598EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2018/08/22 12:00 p.m.24 views

Use of uninitialized memory in temporary

Uninit memory is used as a RNG seed in temporary The following function is used as a way to get entropy from the system, which does operations on and exposes uninit memory, which is UB. rust fn randomseed: &Path, : &str - u64; 2 use std::mem::uninitialized as rand; unsafe rand:: ^ 0x12345678,...

1.1AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2018/06/08 12:00 p.m.24 views

Multiple memory safety issues

Affected versions contain multiple memory safety issues, such as: - Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the Send marker trait to objects that cannot be safely sent between threads This may result in a variety of memory...

9.8CVSS2AI score0.01324EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/08/09 12:00 p.m.23 views

Safe ErrorRegistry APIs can cause undefined behavior

All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The geterror operation also performed an unchecked ca...

5.3AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/05/16 12:00 p.m.23 views

OCI layer symlink escape → arbitrary host write

Affected versions of boxlite extract OCI image layer tarballs without fully containing path resolution to the extraction root. A crafted layer containing a symlink whose target is an absolute on-host path e.g. escape - /tmp followed by a file entry that resolves through that symlink e.g...

9.6CVSS5.8AI score0.00482EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/05/01 12:00 p.m.23 views

Improper check of an invariant resulting in incorrect bounds checks

A bounds verification of a slice storage of a 2-dimensional matrix's coefficients a kernel would compare the total size against the product of individual dimensions. This would erroneously cast after the multiplication and consequently fail to detect possible violations when overflow occurs...

5.9AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/04/30 12:00 p.m.23 views

Panic when allocating a table exceeding the size of the host's address space

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-p8xm-42r7-89xg For more information see the GitHub-hosted security advisory...

7.5CVSS5.2AI score0.00319EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/04/30 12:00 p.m.23 views

Unsound access to padding bytes while serializing date/time values using the Mysql backend

Diesel-async uses the mysql-async crate for interacting with Mysql compatible databases. This library already provides access to deserialized data for date/time releated types. Diesel-async then translated these deserialized data back to their serialized binary representation to hook into diesels...

5.8AI score
SaveExploits0Affected Software1
RustSec
RustSec
added 2026/03/09 12:00 p.m.23 views

Denial of service in Quinn endpoints

Receiving QUIC transport parameters containing invalid values could lead to a panic. Unfortunately the maintainers did not properly assess usage of unwrap calls in the transport parameters parsing code, and we did not have sufficient fuzzing coverage to find this issue. We have since added a...

8.7CVSS5.8AI score0.005EPSS
SaveExploits0Affected Software1
Total number of security vulnerabilities1224