Tagged “rust”
CVEs tagged rust, newest first.
740 CVEsRSS
CVE-2026-44471High· 7.8gix-fs: Symlink prefix-reuse allows worktree escape during checkout
gix-fs: Symlink prefix-reuse allows worktree escape during checkout
GHSA-qcxq-75wr-5cm8Highldap3_proto has LDAP Filter stack exhaustion
ldap3_proto has LDAP Filter stack exhaustion
CVE-2026-82254Highgix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data
gix-pack has multiple DoS vectors: unchecked indexing panics and uncapped OOM allocations from crafted pack data
CVE-2026-82252Highgix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository
gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository
CVE-2026-82253Highgix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure
gix's submodule name validation bypass + trust inheritance flaw enables path traversal and credential disclosure
CVE-2026-82251Highgix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository
gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository
CVE-2026-43868Medium· 5.3Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.
RUSTSEC-2026-0251Nonesized-chunks is unmaintained
sized-chunks is unmaintained
RUSTSEC-2026-0250Noneim-rc is unmaintained
im-rc is unmaintained
RUSTSEC-2026-0249Nonesmartstring is unmaintained
smartstring is unmaintained
RUSTSEC-2026-0248Noneim is unmaintained
im is unmaintained
RUSTSEC-2026-0247Nonebitmaps is unmaintained
bitmaps is unmaintained
RUSTSEC-2026-0120NoneNSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
RUSTSEC-2026-0119NoneCPU exhaustion during message encoding due to O(n²) name compression
CPU exhaustion during message encoding due to O(n²) name compression
RUSTSEC-2026-0118NoneNSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
CVE-2026-42254HighHickory DNS's Record Cache Accepts AUTHORITY-Section NS from Sibling Zone via Parent-Pool Zone-Context Elevation
Hickory DNS's Record Cache Accepts AUTHORITY-Section NS from Sibling Zone via Parent-Pool Zone-Context Elevation
CVE-2026-42559High· 8.8PoCDNS rebinding vulnerability in rmcp Streamable HTTP server transport
DNS rebinding vulnerability in rmcp Streamable HTTP server transport
MAL-2026-3129NoneMalicious code in supertag (crates.io)
Malicious code in supertag (crates.io)
MAL-2026-3126NoneMalicious code in lsh (crates.io)
Malicious code in lsh (crates.io)
RUSTSEC-2026-0113None`unpack_in` can chmod arbitrary directories by following symlinks
`unpack_in` can chmod arbitrary directories by following symlinks
RUSTSEC-2026-0112NonePAX Header Desynchronization in astral-tokio-tar
PAX Header Desynchronization in astral-tokio-tar
MAL-2026-3103NoneMalicious code in amzn_codewhisperer_streaming_client (crates.io)
Malicious code in amzn_codewhisperer_streaming_client (crates.io)
MAL-2026-3102NoneMalicious code in semantic_search_client (crates.io)
Malicious code in semantic_search_client (crates.io)
MAL-2026-3101NoneMalicious code in amzn_consolas_client (crates.io)
Malicious code in amzn_consolas_client (crates.io)
CVE-2026-33471Critical· 9.6nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
RUSTSEC-2026-0207NoneIncorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls
Incorrect Output of Incremental Portable SHAKE API on Multiple Squeeze Calls
RUSTSEC-2026-0104NoneReachable panic in certificate revocation list parsing
Reachable panic in certificate revocation list parsing
MAL-2026-2958NoneMalicious code in mysten_metrics (crates.io)
Malicious code in mysten_metrics (crates.io)
CVE-2026-6654High· 7.3Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics
Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics
RUSTSEC-2026-0099NoneName constraints were accepted for certificates asserting a wildcard name
Name constraints were accepted for certificates asserting a wildcard name