Tagged “rust”
CVEs tagged rust, newest first.
709 CVEsRSS
RUSTSEC-2026-0308NoneUse-after-free in interned values and cached function results
Use-after-free in interned values and cached function results
GHSA-2jx3-ff3v-j7jjMediumyara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB
yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB
RUSTSEC-2026-0394NoneBuild environment compiled into the library and readable at runtime
Build environment compiled into the library and readable at runtime
RUSTSEC-2026-0307High· 7.1`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)
CVE-2026-96889High· 7.8PoCA flaw was found in librsvg
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly fre…
RUSTSEC-2026-0303None`stack-graphs` is archived and unmaintained
`stack-graphs` is archived and unmaintained
RUSTSEC-2026-0302None`stack-graphs` C API exports are safe `extern "C"` functions
`stack-graphs` C API exports are safe `extern "C"` functions
RUSTSEC-2026-0301NoneDouble free in `StackVec::retain` when a predicate or element `Drop` panics
Double free in `StackVec::retain` when a predicate or element `Drop` panics
RUSTSEC-2026-0299None`owned-alloc` is unmaintained
`owned-alloc` is unmaintained
RUSTSEC-2026-0304NoneFinished streaming calls keep reading a stalled request body indefinitely
Finished streaming calls keep reading a stalled request body indefinitely
RUSTSEC-2026-0296None`unzip` is unmaintained
`unzip` is unmaintained
RUSTSEC-2026-0293NoneDouble free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics
Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics
CVE-2026-92612Low· 1.0PoCIn Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can…
RUSTSEC-2026-0309None`SinglyLinkedList::remove` dereferences a null link
`SinglyLinkedList::remove` dereferences a null link
RUSTSEC-2026-0306None`hex_decode_unchecked` AVX2 path reads past `src`
`hex_decode_unchecked` AVX2 path reads past `src`
RUSTSEC-2026-0328High· 7.1`decompress`: tar-family extractors write archive entries without a path-traversal check (tar-slip)
`decompress`: tar-family extractors write archive entries without a path-traversal check (tar-slip)
RUSTSEC-2026-0294NoneUnsoundness in UTF-8 'String' trait
Unsoundness in UTF-8 'String' trait
CVE-2026-61670Medium· 6.5microsandbox is an easy, fast, local-first microVM runtime and library
microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-config argument and passes per-sandbox secrets through repea…
CVE-2026-93657High· 7.5hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be returned as successful results
hickory-resolver versions before 0.26.2 fail to propagate bogus DNSSEC proof states through the Resolver::lookup() and Resolver::lookup_ip() APIs, allowing invalid records to be returned as successful results. Attackers controlling the a…
CVE-2026-93601Low· 2.2rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name
rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly accepted permitted-subtree DNS name constraints for certificates asserting a wildcard name. For example, a name…
CVE-2026-93599High· 7.5PoCrustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs
rustls-webpki through 0.103.12 (and 0.104.0-alpha releases before 0.104.0-alpha.7) contains a reachable panic in bit_string_flags() in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly [0x00] (ze…
CVE-2026-93602Medium· 4.4rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. At…
CVE-2026-93600Low· 2.2rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced
rustls-webpki (rustls/webpki) versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Becaus…
RUSTSEC-2026-0289Nonepqc_kyber is unmaintained
pqc_kyber is unmaintained
RUSTSEC-2026-0287Nonecosmian_kyber is unmaintained
cosmian_kyber is unmaintained
CVE-2026-68537High· 7.5`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants
`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into…
CVE-2026-68523High· 7.5`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants
`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into…
RUSTSEC-2026-0286NoneOut-of-bounds read when decoding CKA_ALLOWED_MECHANISMS
Out-of-bounds read when decoding CKA_ALLOWED_MECHANISMS
CVE-2026-64684Medium· 6.8RMCP is an official Rust SDK for the Model Context Protocol
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/src/transport/common/reqwest/streamable_http_client.rs builds its default_http_client with reqwest…
CVE-2026-63128High· 7.5PoCRMCP is an official Rust SDK for the Model Context Protocol
RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp/src/transport/streamable_http_server/tower.rs allows an unauthenticated client to send a well-fo…