Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0181 | DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths | 2026-06-06T12:00:00Z | 2026-08-25T02:42:17Z |
| rustsec-2026-0180 | Panic decoding a malformed `hstore` value allows denial of service | 2026-06-12T12:00:00Z | 2026-08-25T02:42:17Z |
| rustsec-2026-0179 | Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service | 2026-06-12T12:00:00Z | 2026-08-25T02:42:17Z |
| rustsec-2026-0178 | Panic on a `DataRow` with fewer fields than columns allows denial of service | 2026-06-12T12:00:00Z | 2026-08-25T02:42:17Z |
| rustsec-2026-0267 | Panic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free) | 2026-08-24T12:00:00Z | 2026-08-25T02:41:54Z |
| rustsec-2026-0026 | Unnecessary clamping of seed reduces seed entropy to 251 bits | 2026-02-05T12:00:00Z | 2026-08-24T08:08:07Z |
| rustsec-2026-0025 | Panic in `libcrux-psq` on decryption of malformed AES-GCM ciphertext | 2026-02-08T12:00:00Z | 2026-08-24T08:08:07Z |
| rustsec-2026-0024 | Incorrect X25519 clamping check rejects all secrets on import | 2026-01-26T12:00:00Z | 2026-08-24T08:08:07Z |
| rustsec-2026-0023 | X25519 secret validation did not check buffer length or clamping | 2026-01-26T12:00:00Z | 2026-08-24T08:08:07Z |
| rustsec-2021-0156 | Triton VM Soundness Vulnerability due to Missing Constraint | 2021-06-11T12:00:00Z | 2026-08-24T08:08:07Z |
| rustsec-2026-0266 | `internment` 0.8.7 was removed from crates.io due to a malicious dependency | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0265 | `proc-macro1` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0264 | `proc-macro-en` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0262 | `append-only-vec` 0.1.9 was removed from crates.io due to a malicious dependency | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0261 | `aronenao` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0260 | `arrayref` 0.3.10 was removed from crates.io due to a malicious dependency | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0259 | `arone` was removed from crates.io due to malicious code | 2026-08-20T12:00:00Z | 2026-08-21T06:28:40Z |
| rustsec-2026-0263 | `tinymember` was removed from crates.io due to affiliation with malicious code | 2026-08-20T12:00:00Z | 2026-08-20T15:52:09Z |
| rustsec-2026-0258 | h2 unbounded empty DATA frames | 2026-08-17T12:00:00Z | 2026-08-18T08:23:07Z |
| rustsec-2026-0257 | Unix `BROWSER` handling allows browser argument injection | 2026-07-29T12:00:00Z | 2026-08-12T10:42:29Z |
| rustsec-2026-0256 | Panic-safety unsoundness in `truncate_back`, `truncate_front`, `clear`, and `extend_from_slice` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0255 | Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0254 | Panic-safety unsoundness in `Chunk` and `InlineArray` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2025-0170 | `hugepage_rs::dealloc` may allow invalid memory deallocation from safe code | 2025-04-24T12:00:00Z | 2026-08-12T09:44:47Z |
| rustsec-2026-0253 | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | 2026-05-12T12:00:00Z | 2026-08-11T11:04:49Z |
| rustsec-2026-0252 | Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read) | 2026-08-11T12:00:00Z | 2026-08-11T10:40:01Z |
| rustsec-2025-0169 | `FormatContext` stream accessors can cause undefined behavior from safe code | 2025-04-24T12:00:00Z | 2026-08-11T10:24:59Z |
| rustsec-2025-0168 | Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write | 2025-03-16T12:00:00Z | 2026-08-11T10:24:59Z |
| rustsec-2026-0251 | sized-chunks is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2026-0250 | im-rc is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |