Tagged “rust”
CVEs tagged rust, newest first.
666 CVEsRSS
RUSTSEC-2026-0376Low· 3.7`wasi-http`: Guests can add conflicting content lengths to messages
`wasi-http`: Guests can add conflicting content lengths to messages
RUSTSEC-2026-0375Medium· 5.3`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies
CVE-2026-111062LowA russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request
CVE-2026-111061Medium· 4.3PoCrussh agent server converts constraint records into unbounded never-rolled-back tasks
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSH_AGENT_CONSTRAIN_LIFETIME record in a constrained add-key …
RUSTSEC-2026-0410NoneWebAssembly allocator shim corrupts memory on allocation failure
WebAssembly allocator shim corrupts memory on allocation failure
RUSTSEC-2026-0406NoneUse-after-free when changing a multithreaded context with an unfinished frame
Use-after-free when changing a multithreaded context with an unfinished frame
RUSTSEC-2026-0405NoneOut-of-bounds read with an out-of-range `InBuffer::pos`
Out-of-bounds read with an out-of-range `InBuffer::pos`
RUSTSEC-2026-0404NoneDouble free in `DCtx::try_clone`
Double free in `DCtx::try_clone`
RUSTSEC-2026-0403NoneUninitialized memory exposed when streaming decompression of a legacy frame fails
Uninitialized memory exposed when streaming decompression of a legacy frame fails
RUSTSEC-2026-0402NoneHeap buffer overflow in `CCtx::try_clone` on a multithreaded context
Heap buffer overflow in `CCtx::try_clone` on a multithreaded context
RUSTSEC-2026-0401NoneOut-of-bounds read in `train_from_buffer` when sample sizes overflow
Out-of-bounds read in `train_from_buffer` when sample sizes overflow
RUSTSEC-2026-0400NoneUse-after-free of a dictionary after a one-shot call on a context with an open stream
Use-after-free of a dictionary after a one-shot call on a context with an open stream
RUSTSEC-2026-0399NoneUse-after-free through `init_using_cdict` and `init_using_ddict`
Use-after-free through `init_using_cdict` and `init_using_ddict`
RUSTSEC-2026-0398None`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end
`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end
RUSTSEC-2026-0397None`OutBuffer::around_pos` exposes uninitialized memory
`OutBuffer::around_pos` exposes uninitialized memory
RUSTSEC-2026-0396None`Seekable` reads a NULL or out-of-bounds seek table
`Seekable` reads a NULL or out-of-bounds seek table
RUSTSEC-2026-0395NoneUse-after-free with `CParameter::StableInBuffer`
Use-after-free with `CParameter::StableInBuffer`
RUSTSEC-2026-0393NoneOut-of-bounds read when training a dictionary from inconsistent sample sizes
Out-of-bounds read when training a dictionary from inconsistent sample sizes
RUSTSEC-2026-0392NoneUninitialized memory exposed by `write::Decoder` on a corrupt legacy frame
Uninitialized memory exposed by `write::Decoder` on a corrupt legacy frame
RUSTSEC-2026-0391NoneData from an abandoned stream leaks into the next stream on a reused context
Data from an abandoned stream leaks into the next stream on a reused context
RUSTSEC-2026-0373NoneMissing case-insensitive matching for CSS url function
Missing case-insensitive matching for CSS url function
RUSTSEC-2026-0372None`zvariant_derive` is unmaintained
`zvariant_derive` is unmaintained
RUSTSEC-2026-0371None`zbus_names` is unmaintained
`zbus_names` is unmaintained
RUSTSEC-2026-0370None`zvariant` is unmaintained
`zvariant` is unmaintained
RUSTSEC-2026-0366Low· 3.3Stack overflow when parsing deeply nested input in pest_grammars
Stack overflow when parsing deeply nested input in pest_grammars
GHSA-6fj4-rcr3-r7rrHigh· 7.5lopdf has a stack overflow via deeply nested PDF objects
lopdf has a stack overflow via deeply nested PDF objects
CVE-2026-58494Medium· 6.5Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination
CVE-2026-63430Medium· 6.3PoCammonia is a Rust library for repairing and securing untrusted HTML
ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least one raw-text HTML element while disallowing the encoding…
RUSTSEC-2026-0365High· 7.5Remote DoS through unchecked `IdList` allocation in negentropy
Remote DoS through unchecked `IdList` allocation in negentropy
RUSTSEC-2026-0364NoneException tags can cause host data structures to be unaligned
Exception tags can cause host data structures to be unaligned