Tagged “rust”
CVEs tagged rust, newest first.
666 CVEsRSS
GHSA-h2v8-394m-p7vvLow· 3.7Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
GHSA-c8m5-c952-6cm4Medium· 4.0Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
GHSA-w44r-93j7-qv28Low· 3.7rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
GHSA-vp88-798v-h67fLow· 2.3rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
RUSTSEC-2026-0413NoneUse-after-free of caller-owned server name in client connection constructors
Use-after-free of caller-owned server name in client connection constructors
RUSTSEC-2026-0412High· 7.8Arbitrary code execution when rerunning tests from a portable recording
Arbitrary code execution when rerunning tests from a portable recording
RUSTSEC-2026-0409NoneUse-after-free from a comparator that answers inconsistently
Use-after-free from a comparator that answers inconsistently
RUSTSEC-2026-0408NoneAliasing violations in splice, mutable iteration and cursors
Aliasing violations in splice, mutable iteration and cursors
RUSTSEC-2026-0387NoneMultiple timing variability issues in operations intended to be constant-time
Multiple timing variability issues in operations intended to be constant-time
CVE-2026-115889Critical· 9.9Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted…
GHSA-q54r-jf2p-rfr2High· 7.3gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
RUSTSEC-2026-0385NoneNon-constant-time mask generation and `u128` comparisons
Non-constant-time mask generation and `u128` comparisons
RUSTSEC-2026-0411NoneOut-of-bounds read in `Log2Cache::nlog2n()`, `nlog2n_difference()` and `plog2p()`
Out-of-bounds read in `Log2Cache::nlog2n()`, `nlog2n_difference()` and `plog2p()`
RUSTSEC-2026-0407High· 7.5SSRF and local file disclosure via unvalidated URLs
SSRF and local file disclosure via unvalidated URLs
CVE-2026-115385Medium· 6.2Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps
Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASIp3 implementation that allows guests to abort the Unix host process. Guests with mutable preopened directory acces…
CVE-2026-115381Medium· 4.8Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the wasmtime-wasi WASIp2 write-zeroes method of SinkOutputStream, the default stream used when stdout/stderr are not confi…
CVE-2026-115380Medium· 4.0Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll_oneoff
Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASI preview 0 poll_oneoff adapter, which performs O(n) host work per subscription without consuming …
CVE-2026-115567Medium· 5.8Race condition in `tokio::time::Interval` on Tokio v1.54.0
Race condition in `tokio::time::Interval` on Tokio v1.54.0
RUSTSEC-2026-0384NoneRace condition in `tokio::time::Interval` on Tokio v1.54.0
Race condition in `tokio::time::Interval` on Tokio v1.54.0
CVE-2026-113799Medium· 5.3Slack Morphism verifier errors disclose valid HMACs in the logs
Slack Morphism verifier errors disclose valid HMACs in the logs
CVE-2026-111943Medium· 6.8PoCcrypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates (CVE-2026-111943)
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority (CA). A remote attacker presenting a certificate signe…
CVE-2026-105297High· 7.5Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits
CVE-2026-105298Medium· 6.3Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass
CVE-2026-105299High· 8.7Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments
Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments
CVE-2026-115892Medium· 5.7Panic lowering a host-created component model stream into a guest that expects a different payload type
Panic lowering a host-created component model stream into a guest that expects a different payload type
CVE-2026-115893Critical· 9.9PoCCranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
RUSTSEC-2026-0380Critical· 9.9Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Bit-packing in Cranelift compiler causes silent overflow and miscompilation
RUSTSEC-2026-0379Critical· 9.9Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
RUSTSEC-2026-0378NonePanic lowering a host-created component model stream into a guest that expects a different payload type
Panic lowering a host-created component model stream into a guest that expects a different payload type
RUSTSEC-2026-0377Low· 3.7`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook
`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook