Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0257 | Unix `BROWSER` handling allows browser argument injection | 2026-07-29T12:00:00Z | 2026-08-12T10:42:29Z |
| rustsec-2026-0256 | Panic-safety unsoundness in `truncate_back`, `truncate_front`, `clear`, and `extend_from_slice` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0255 | Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2026-0254 | Panic-safety unsoundness in `Chunk` and `InlineArray` (use-after-free / double-free) | 2026-08-11T12:00:00Z | 2026-08-12T10:22:26Z |
| rustsec-2025-0170 | `hugepage_rs::dealloc` may allow invalid memory deallocation from safe code | 2025-04-24T12:00:00Z | 2026-08-12T09:44:47Z |
| rustsec-2026-0253 | Potential use-after-free due to lack of panic safety in `LruCache::pop()` | 2026-05-12T12:00:00Z | 2026-08-11T11:04:49Z |
| rustsec-2026-0252 | Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read) | 2026-08-11T12:00:00Z | 2026-08-11T10:40:01Z |
| rustsec-2025-0169 | `FormatContext` stream accessors can cause undefined behavior from safe code | 2025-04-24T12:00:00Z | 2026-08-11T10:24:59Z |
| rustsec-2025-0168 | Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write | 2025-03-16T12:00:00Z | 2026-08-11T10:24:59Z |
| rustsec-2026-0251 | sized-chunks is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2026-0250 | im-rc is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2026-0249 | smartstring is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2026-0248 | im is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2026-0247 | bitmaps is unmaintained | 2026-05-03T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2025-0167 | `Bitmap::try_from(&[u8])` can create invalid values | 2025-12-25T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2023-0126 | Aliasing violation in `OrdSet` insertion | 2023-02-04T12:00:00Z | 2026-08-10T19:33:56Z |
| rustsec-2026-0246 | `sevenz-rust` is unmaintained | 2026-08-06T12:00:00Z | 2026-08-10T15:33:54Z |
| rustsec-2026-0245 | Relative/Absolute Path Traversal (CWE-23/CWE-36) in `decompress_impl` that enables an arbitrary file write. | 2026-08-06T12:00:00Z | 2026-08-10T06:16:10Z |
| rustsec-2026-0244 | `setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization | 2026-08-06T12:00:00Z | 2026-08-09T14:57:02Z |
| rustsec-2026-0243 | `nostr-relay-pool` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0242 | Safe ErrorRegistry APIs can cause undefined behavior | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0241 | `nostr-keyring` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0240 | Ed25519 identity public keys permit universal signature forgery | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0239 | Streaming AEAD does not authenticate stream structure | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0238 | Low-level GCM ignores the operation nonce | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0237 | `nostr-relay-builder` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0236 | A `BigInt` division panics, and two neighbouring operations answer wrongly in silence | 2026-08-06T12:00:00Z | 2026-08-06T09:00:34Z |
| rustsec-2026-0235 | Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc | 2026-05-13T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0234 | Insufficient archive validation can cause out-of-bounds reads in archives containing hash tables | 2026-05-11T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0233 | Crafted archives can cause a use-after-free during deserialization | 2026-05-11T12:00:00Z | 2026-08-04T09:27:20Z |