Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low3.3Stack overflow when parsing deeply nested input in pest_grammarsVuln · RUSTSEC-2026-0366 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 16, 2026
- High7.5Remote DoS through unchecked allocation in negentropyVuln · RUSTSEC-2026-0365 · RustSec · Rust · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownException tags can cause host data structures to be unalignedVuln · RUSTSEC-2026-0364 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- Medium6.2Component-model handle tables are capped only per instance and charged to no limitVuln · RUSTSEC-2026-0363 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownWasmtime may not properly enforce async-entrypoint requirementVuln · RUSTSEC-2026-0362 · RustSec · Rust · RustSec Advisory DBOct 14, 2026
- UnknownPanic when pending calls are run after a trapVuln · RUSTSEC-2026-0361 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownOverlapping string transcode in a fused adapter can panicVuln · RUSTSEC-2026-0360 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- Medium5.3Stack overflow dropping a long chain of recursive typesVuln · RUSTSEC-2026-0359 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownYielding in a component start function can lead to a host panicVuln · RUSTSEC-2026-0358 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownOut-of-bounds zero-length stream writes can panicVuln · RUSTSEC-2026-0357 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- Medium5.3Panic on erroneous call-to-host from guest realloc callVuln · RUSTSEC-2026-0356 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownPanic viewing component model stream or future as the wrong typeVuln · RUSTSEC-2026-0355 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownHost panic when component is cancelled under some conditionsVuln · RUSTSEC-2026-0354 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownPanic when invoking an async-lifted function viaVuln · RUSTSEC-2026-0353 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- UnknownFilesystem sandbox escape when renaming symlinks with trailing slashesVuln · RUSTSEC-2026-0352 · RustSec · Rust · RustSec Advisory DBOct 14, 2026
- Unknown: Request with long url before query parameter crashes hostVuln · RUSTSEC-2026-0351 · RustSec · Rust · RustSec Advisory DBOct 14, 2026
- UnknownGuests can send absolute-form HTTP requests to different hostsVuln · RUSTSEC-2026-0350 · RustSec · Rust · RustSec Advisory DBOct 14, 2026
- Low3.7Unauthenticated ServerHello can downgrade later connections to classical key exchangeVuln · RUSTSEC-2026-0349 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- Low3.7Brotli certificate decompression can allocate up to 1 GiB before authenticationVuln · RUSTSEC-2026-0348 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionVuln · RUSTSEC-2026-0347 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- Medium4.0impls for client session values expose TLS secretsVuln · RUSTSEC-2026-0346 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 14, 2026
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Vuln · RUSTSEC-2026-0344 · RustSec · Rust · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 11, 2026
- Critical9.1ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the targetVuln · RUSTSEC-2026-0369 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 10, 2026
- Unknownzip: creates symbolic links whose attacker-controlled targets are outside the destination directoryVuln · RUSTSEC-2026-0368 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 9, 2026
- High7.3Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege EscalationVuln · RUSTSEC-2026-0367 · RustSec · Rust · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · RustSec Advisory DB · RustOct 9, 2026
