zstd vulnerabilities
CVEs whose affected-version data names the zstd package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
RUSTSEC-2026-0393NoneOut-of-bounds read when training a dictionary from inconsistent sample sizes
Out-of-bounds read when training a dictionary from inconsistent sample sizes
▾ Sunlitzstd · zstdvia OSV
RUSTSEC-2026-0392NoneUninitialized memory exposed by `write::Decoder` on a corrupt legacy frame
Uninitialized memory exposed by `write::Decoder` on a corrupt legacy frame
▾ Sunlitzstd · zstdvia OSV
RUSTSEC-2026-0391NoneData from an abandoned stream leaks into the next stream on a reused context
Data from an abandoned stream leaks into the next stream on a reused context
▾ Sunlitzstd · zstdvia OSV