Lucene search
+L
RustsecMost viewed

1224 matches found

RustSec
RustSec
•added 2026/05/01 12:00 p.m.•20 views

Fragile bounds check when sampling from image

A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered NaN cases improperly, causing them to succeed the check instead of failing it. The floating point coordinate is under caller control by passing a selected...

5.9AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2026/04/09 12:00 p.m.•20 views

Host data leakage with 64-bit tables and Winch

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-m9w2-8782-2946 For more information see the GitHub-hosted security advisory...

6.5CVSS5.9AI score0.00324EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2026/03/20 12:00 p.m.•20 views

`tokio-uds` is unmaintained

The tokio-uds crate is unmaintained. It was part of the Tokio 0.1 ecosystem and has been superseded by the main tokio crate...

5.7AI score
SaveExploits0
RustSec
RustSec
•added 2026/03/19 12:00 p.m.•20 views

`unpack_in` can chmod arbitrary directories by following symlinks

In versions 0.4.44 and below of tar-rs, when unpacking a tar archive, the tar crate's unpackdir function uses fs::metadatafs-metadata to check whether a path that already exists is a directory. Because fs::metadata follows symbolic links, a crafted tarball containing a symlink entry followed by a...

6.5CVSS5.8AI score0.00379EPSS
SaveExploits1Affected Software1
RustSec
RustSec
•added 2026/03/17 12:00 p.m.•20 views

Insufficient validation of PAX extensions during extraction

In versions 0.5.6 and earlier of astral-tokio-tar, malformed PAX extensions were silently skipped when parsing tar archives. This silent skipping rather than rejection of invalid PAX extensions could be used as a building block for a parser differential, for example by silently skipping a malform...

6.3CVSS5.7AI score0.00249EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2026/03/04 12:00 p.m.•20 views

Cache poisoning via insecure-by-default cache key

Pingora versions prior to 0.8.0 generated cache keys using only the URI path, excluding critical factors such as the host header. This allows an attacker to poison the cache and serve cross-origin responses to users. This vulnerability affects users of Pingora's alpha proxy caching feature who...

8.4CVSS6AI score0.00394EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2026/03/04 12:00 p.m.•20 views

`dnp3times` was removed from crates.io due to malicious code

The dnp3times crate attempted to exfiltrate .env files to a server that was in turn impersonating the legitimate timeapi.io service. It was loosely trying to typosquat the dnp3time crate, but otherwise was the same attack as the timecalibrator and timecalibrators malware yesterday. The malicious...

5.9AI score
SaveExploits0
RustSec
RustSec
•added 2026/03/03 12:00 p.m.•20 views

`time_calibrator` was removed from crates.io due to malicious code

It was reported timecalibrator contained malicious code, that would try to upload .env files to a server. The malicious crate had only 1 version published at 2026-02-28 and no evidence of actual usage. The crate was removed from crates.io and the user account was locked. There were no crates...

6AI score
SaveExploits0
RustSec
RustSec
•added 2026/02/24 12:00 p.m.•20 views

Panic when dropping a `[Typed]Func::call_async` future

This is an entry in the RustSec database for the Wasmtime security advisory located at https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-xjhv-v822-pf94 For more information see the GitHub-hosted security advisory...

7.5CVSS5.3AI score0.00362EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2026/02/24 12:00 p.m.•20 views

`rpc-check` was removed from crates.io for malicious code

This is part of an ongoing campaign to attempt to typosquat crates in the polymarket-client-sdk ecosystem to exfiltrate user credentials. The malicious crate had 6 versions published from 2026-02-20 onwards and had no evidence of actual usage. There were no crates depending on this crate on...

5.5AI score
SaveExploits0
RustSec
RustSec
•added 2025/12/22 12:00 p.m.•20 views

Unsoundness of safe `reciprocal_mg10`

The function reciprocalmg10 is marked as safe but can trigger undefined behavior out-of-bounds access because it relies on debugassert! for safety checks instead of assert!. When compiled in release mode, the debugassert! is optimized out, potentially allowing invalid inputs to cause memory...

7.3AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/12/09 12:00 p.m.•20 views

`finch_cli_rust` was removed from crates.io for malicious code

This attempts to typosquat the existing crate finchcli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reportin...

5.5AI score
SaveExploits0
RustSec
RustSec
•added 2025/12/08 12:00 p.m.•20 views

matrix-sdk-base: Denial of service due to custom `m.room.join_rules` events

The matrix-sdk-base crate is unable to handle responses that include custom m.room.joinrules values due to a serialization bug. This can be exploited to cause a denial-of-service condition, if a user is invited to a room with non-standard join rules, the crate's sync process will stall, preventin...

7.5CVSS6.8AI score0.0041EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/11/10 12:00 p.m.•20 views

tandem is unmaintained

The tandem crates in https://github.com/sine-fdn are no longer maintained by the SINE Foundation. The repository has been archived. Recommended alternative We are continuing our work on SMPC by implementing our secure multi-party computation engine Polytune...

7AI score
SaveExploits0
RustSec
RustSec
•added 2025/10/23 12:00 p.m.•20 views

Multiple soundness issues in `stackvector`

Affected versions of stackvector contained multiple soundness issues that could allow safe Rust code to trigger undefined behavior. One issue was that StackVec::length was exposed as a public field. Safe Rust code could set length to a value larger than the backing array capacity. Other safe...

5.9AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/10/18 12:00 p.m.•20 views

`unic-ucd-ident` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icuproperties - unicode-ident...

7AI score
SaveExploits0
RustSec
RustSec
•added 2025/10/18 12:00 p.m.•20 views

`unic-ucd-normal` is unmaintained

All Unicode crates that are part of https://github.com/open-i18n/rust-unic are unmaintained. Recommended alternatives - icunormalizer...

7AI score
SaveExploits0
RustSec
RustSec
•added 2025/10/18 12:00 p.m.•20 views

Heap-buffer-overflow in nftnl::Batch::with_page_size (nftnl-rs)

A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::withpagesize constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...

7.3AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/09/17 12:00 p.m.•20 views

Pingora MadeYouReset HTTP/2 vulnerability

Pingora deployments using versions prior to 0.6.0 that include HTTP/2 server support may be affected by the vulnerability described in CVE-2025-8671. Under certain conditions, Pingora applications may allocate buffers before the HTTP/2 reset and resulting stream cancellation is processed by the...

7.5CVSS6.8AI score0.0351EPSS
SaveExploits3Affected Software1
RustSec
RustSec
•added 2025/09/09 12:00 p.m.•20 views

The `google-apis-rs` project is now unmaintained

Instead, please start using and migrate to the official Google Rust bindings...

7AI score
SaveExploits0
RustSec
RustSec
•added 2025/09/08 12:00 p.m.•20 views

servo-fontconfig crate is unmaintained

The servo-fontconfig crate is no longer actively maintained. If you rely on this crate, consider switching to a maintained alternative. Recommended alternatives - fontconfig-rs...

6.9AI score
SaveExploits0
RustSec
RustSec
•added 2025/07/17 12:00 p.m.•20 views

ConstStaticCell could have been used to pass non-Send values to another thread

ConstStaticCell could have been used to pass non-Send values to another thread, because T was not required to be Send while ConstStaticCell is Send. This was corrected by introducing a T: Send bound...

7.1AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/05/04 12:00 p.m.•20 views

Unsound issue in Trailer

Our static analyzer find a potential unsound issue in the construction of Trailer, where it doesn't provide enough check to ensure the soundness. trailer/src/lib.rs, Lines 18 to 25 in d474984: pub fn newcapacity: usize - Trailer unsafe let trailer = Trailer::allocatecapacity; let ptr = trailer.pt...

9.8CVSS5.5AI score0.00534EPSS
SaveExploits1
RustSec
RustSec
•added 2025/04/28 12:00 p.m.•20 views

Panic in mp3-metadata due to the lack of bounds checking

The getid3 methods used by mp3metadata::readfromslice does not perform adequate bounds checking when recreating the tag due to the use of desynchronization. Fixed in Fix index error, released as part of 0.4.0...

7.1AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/04/07 12:00 p.m.•20 views

Broadcast channel calls clone in parallel, but does not require `Sync`

The broadcast channel internally calls clone on the stored value when receiving it, and only requires T:Send. This means that using the broadcast channel with values that are Send but not Sync can trigger unsoundness if the clone implementation makes use of the value being !Sync. Thank you to...

6.8AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/03/27 12:00 p.m.•20 views

Public API without sufficient bounds checking

Match::get and Match::ptr lack sufficient bounds checks, leading to potential out of bounds reads...

7.1AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/03/06 12:00 p.m.•20 views

Some AES functions may panic when overflow checking is enabled.

ring::aead::quic::HeaderProtectionKey::newmask may panic when overflow checking is enabled. In the QUIC protocol, an attacker can induce this panic by sending a specially-crafted packet. Even unintentionally it is likely to occur in 1 out of every 232 packets sent and/or received. On 64-bit targe...

5.3CVSS7.2AI score0.00986EPSS
SaveExploits0Affected Software1
RustSec
RustSec
•added 2025/02/07 12:00 p.m.•20 views

Hickory DNS failure to verify self-signed RRSIG for DNSKEYs

Summary The DNSSEC validation routines treat entire RRsets of DNSKEY records as trusted once they have established trust in only one of the DNSKEYs. As a result, if a zone includes a DNSKEY with a public key that matches a configured trust anchor, all keys in that zone will be trusted to...

7.3AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2024/12/28 12:00 p.m.•20 views

Use of insecure cryptographic algorithms

This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...

7AI score
SaveExploits0
RustSec
RustSec
•added 2024/11/22 12:00 p.m.•20 views

rustls network-reachable panic in `Acceptor::accept`

A bug introduced in rustls 0.23.13 leads to a panic if the received TLS ClientHello is fragmented. Only servers that use rustls::server::Acceptor::accept are affected. Servers that use tokio-rustls's LazyConfigAcceptor API are affected. Servers that use tokio-rustls's TlsAcceptor API are not...

7.5CVSS7AI score0.00731EPSS
SaveExploits1Affected Software1
RustSec
RustSec
•added 2024/03/30 12:00 p.m.•20 views

Unsoundness in `Iterator` and `DoubleEndedIterator` impls for `glib::VariantStrIter`

The VariantStrIter::implget function called internally by implementations of the Iterator and DoubleEndedIterator traits for this type was unsound, resulting in undefined behaviour. An immutable reference &p to a mut libc::cchar pointer initialized to NULL was passed as an argument to a C functio...

7.4AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2023/09/12 12:00 p.m.•20 views

libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild. libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable"...

8.8CVSS9.8AI score0.99979EPSS
SaveExploits9Affected Software1
RustSec
RustSec
•added 2023/06/15 12:00 p.m.•20 views

Misaligned pointer dereference in `ChunkId::new`

The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function...

6.8AI score
SaveExploits0
RustSec
RustSec
•added 2023/06/01 12:00 p.m.•20 views

Remote Attackers can cause Denial-of-Service (packet loops) with crafted DNS packets

trust-dns and trust-dns-server are vulnerable to remotely triggered denial-of-service attacks, consuming both network and CPU resources. DNS messages with the QR=1 bit set are responded to with a FormErr response. This allows creating a traffic loop, in which these FormErr responses are sent...

6.8AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2023/04/17 12:00 p.m.•20 views

Adverserial use of `make_bitflags!` macro can cause undefined behavior

The macro relied on an expression of the form Enum::Variant always being a variant of the enum. However, it may also be an associated integer constant, in which case there's no guarantee that the value of said constant consists only of bits valid for this bitflag type. Thus, code like this could...

6.8AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2023/03/12 12:00 p.m.•20 views

const-cstr is Unmaintained

Last release was about five years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. No direct fork exist. const-cstr is...

0.5AI score
SaveExploits0
RustSec
RustSec
•added 2022/05/11 12:00 p.m.•20 views

double-checked-cell is unmaintained

The author recommends switching to oncecell, which offers a superset of the functionality...

3.5AI score
SaveExploits0
RustSec
RustSec
•added 2022/01/26 12:00 p.m.•20 views

xml-rs is Unmaintained

xml-rs is a XML parser has open issues around parsing including integer overflows / panics that may or may not be an issue with untrusted data. Together with these open issues with Unmaintained status xml-rs may or may not be suited to parse untrusted data. Alternatives - quick-xml...

5.1AI score
SaveExploits0
RustSec
RustSec
•added 2022/01/17 12:00 p.m.•20 views

project abandoned

The r2d2-odbc-api crate might be an alternative...

1.4AI score
SaveExploits0
RustSec
RustSec
•added 2022/01/10 12:00 p.m.•20 views

Unsoundness in `dashmap` references

Reference returned by some methods of Ref and similar types may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault. More information in dashmap167 issue...

2.4AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2021/10/04 12:00 p.m.•20 views

traitobject is Unmaintained

Crate traitobject has not had a release for over five years. In addition there is an existing security advisory that has not been addressed: - RUSTSEC-2020-0027 Possible Alternatives The below list has not been vetted in any way and may or may not contain alternatives; - destructuretraitobject...

3.5AI score
SaveExploits0
RustSec
RustSec
•added 2021/05/27 12:00 p.m.•20 views

Permissions bypass in pleaser

Failure to normalize the umask in pleaser before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...

7.8CVSS4.7AI score0.00408EPSS
SaveExploits1Affected Software1
RustSec
RustSec
•added 2021/04/29 12:00 p.m.•20 views

`aes-ctr` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: The aes crate now has an optional ctr feature which autodetects SIMD features on i686/x86-64 targets and uses them if available, or otherwise falls back to the implementation in the ctr crate. If you would prefer not to ha...

SaveExploits0
RustSec
RustSec
•added 2021/04/29 12:00 p.m.•20 views

`aes-soft` has been merged into the `aes` crate

Please use the aes crate going forward. The new repository location is at: AES-NI is now autodetected at runtime on i686/x86-64 platforms. If AES-NI is not present, the aes crate will fallback to a constant-time portable software implementation. To force the use of a constant-time portable...

0.4AI score
SaveExploits0
RustSec
RustSec
•added 2020/12/31 12:00 p.m.•20 views

`read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)

Affected versions of this crate calls a user provided Read implementation on an uninitialized buffer. Read on uninitialized buffer is defined as undefined behavior in Rust...

7.5CVSS3.5AI score0.01059EPSS
SaveExploits0
RustSec
RustSec
•added 2020/11/15 12:00 p.m.•20 views

CopyCell lacks bounds on its Send trait allowing for data races

CopyCell is a Cell-like type that is implemented for any type T that is Copyable. It's Send trait has no bounds on the contained type. As not all Copyable types are thread safe, for example non-mutable references implement the Copy trait, it is possible to send references to types with interior...

8.1CVSS2.3AI score0.01098EPSS
SaveExploits1
RustSec
RustSec
•added 2020/11/02 12:00 p.m.•20 views

crate has been renamed to `sn_routing`

This crate has been renamed from routing to snrouting. The new repository location is:...

6.9AI score
SaveExploits0
RustSec
RustSec
•added 2020/08/27 12:00 p.m.•20 views

`cell-project` used incorrect variance when projecting through `&Cell<T>`

Overview The issue lies in the implementation of the cellproject macro which used field as const instead of field as mut . The problem being that const T is covariant in T while mut T is invariant in T. Keep in mind that &Cell is invariant in T, so casting to const T relaxed the variance, and lea...

5.5AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2020/01/21 12:00 p.m.•20 views

Threshold value is ignored (all shares are n=3)

Affected versions of this crate did not properly calculate secret shares requirements. This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit. The flaw was corrected by correctly configuring the threshold...

2.5AI score
SaveExploits0Affected Software1
RustSec
RustSec
•added 2018/09/17 12:00 p.m.•20 views

Uncontrolled recursion leads to abort in deserialization

Affected versions of this crate did not properly check for recursion while deserializing aliases. This allows an attacker to make a YAML file with an alias referring to itself causing an abort. The flaw was corrected by checking the recursion depth...

4.5AI score
SaveExploits0Affected Software1
Total number of security vulnerabilities1224