Tagged “rust”
CVEs tagged rust, newest first.
740 CVEsRSS
CVE-2026-48110High· 7.5Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds
Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds
RUSTSEC-2026-0175None`onering` 1.4.1 was removed from crates.io for malicious code
`onering` 1.4.1 was removed from crates.io for malicious code
RUSTSEC-2026-0209NoneAES-GCM did not enforce limits on AAD length
AES-GCM did not enforce limits on AAD length
CVE-2026-49233HighRoutinator has cache path traversal when processing the module component of rsync URIs
Routinator has cache path traversal when processing the module component of rsync URIs
CVE-2026-49235HighRoutinator crashes when encountering maliciously crafted RRDP XML files
Routinator crashes when encountering maliciously crafted RRDP XML files
CVE-2026-49234High· 7.5Routinator crashes when sending a maliciously crafted select-asn query parameter
Routinator crashes when sending a maliciously crafted select-asn query parameter
RUSTSEC-2026-0181NoneDoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
DoS vulnerability in HTTP/1.x chunked encoding parser triggered by maliciously crafted chunk lengths
RUSTSEC-2026-0172NonePossible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`
Possible use after free when deserializing a SQLite database via `SqliteConnection::deserialize_readonly_database`
RUSTSEC-2026-0279High· 8.1Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution
Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution
RUSTSEC-2026-0155None`exploration` was removed from crates.io for malicious code
`exploration` was removed from crates.io for malicious code
CVE-2026-47425Mediumrattler has an entry-point path traversal in noarch:python install (arbitrary file write)
rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
CVE-2026-44726High· 7.4Deno's TLS retry copies stale upgrade hook, risking plaintext traffic
Deno's TLS retry copies stale upgrade hook, risking plaintext traffic
RUSTSEC-2026-0152NoneUse-after-free
Use-after-free
CVE-2026-40034High· 7.8PoCgix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initia…
gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initia…
RUSTSEC-2026-0212NonePotentially Incorrect Output of Constant-Time Swap/Select on Aarch64
Potentially Incorrect Output of Constant-Time Swap/Select on Aarch64
RUSTSEC-2026-0208NonePotential Panic in AVX2 SHAKE-256
Potential Panic in AVX2 SHAKE-256
CVE-2026-47261High· 7.5⚖ disputedWASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction
WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction
CVE-2026-45792Medium· 5.5RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM
RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM
RUSTSEC-2026-0145NonePAX Header Desynchronization in astral-tokio-tar
PAX Header Desynchronization in astral-tokio-tar
CVE-2026-46695Critical· 10.0Read-only volume remount bypass via guest CAP_SYS_ADMIN
Read-only volume remount bypass via guest CAP_SYS_ADMIN
CVE-2026-46703Critical· 10.0OCI layer symlink escape → arbitrary host write
OCI layer symlink escape → arbitrary host write
CVE-2026-46673High· 7.5Unbounded 32-bit allocation
Unbounded 32-bit allocation
CVE-2026-46428NoneTLS hostname verification disabled when using Boring TLS backend
TLS hostname verification disabled when using Boring TLS backend
CVE-2026-44216High· 7.5Wasmtime is a runtime for WebAssembly
Wasmtime is a runtime for WebAssembly. From 30.0.0 to 36.0.8, 43.0.2, and 44.0.1, Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow. This overflow is possible to trigger, and thus…
RUSTSEC-2026-0235NoneInsufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc
RUSTSEC-2026-0253NonePotential use-after-free due to lack of panic safety in `LruCache::pop()`
Potential use-after-free due to lack of panic safety in `LruCache::pop()`
RUSTSEC-2026-0234NoneInsufficient archive validation can cause out-of-bounds reads in archives containing hash tables
Insufficient archive validation can cause out-of-bounds reads in archives containing hash tables
RUSTSEC-2026-0233NoneCrafted archives can cause a use-after-free during deserialization
Crafted archives can cause a use-after-free during deserialization
RUSTSEC-2026-0146None`InterfaceAccount` allows account substitution between unexpected types
`InterfaceAccount` allows account substitution between unexpected types
CVE-2026-45137High· 8.2`Program<System>` accepts arbitrary executable programs
`Program<System>` accepts arbitrary executable programs