Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownException tags can cause host data structures to be unalignedOct 14, 2026
- Medium6.2Component-model handle tables are capped only per instance and charged to no limitOct 14, 2026
- UnknownPanic when pending calls are run after a trapOct 14, 2026
- UnknownOverlapping string transcode in a fused adapter can panicOct 14, 2026
- Medium5.3Panic on erroneous call-to-host from guest realloc callOct 14, 2026
- UnknownPanic viewing component model stream or future as the wrong typeOct 14, 2026
- UnknownHost panic when component is cancelled under some conditionsOct 14, 2026
- UnknownPanic when invoking an async-lifted function viaOct 14, 2026
- Low3.7Unauthenticated ServerHello can downgrade later connections to classical key exchangeOct 14, 2026
- Low3.7Brotli certificate decompression can allocate up to 1 GiB before authenticationOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOct 14, 2026
- Medium4.0impls for client session values expose TLS secretsOct 14, 2026
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Oct 11, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- High7.5Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassemblyEPSS 0.8%Jun 22, 2026
- High8.6phonenumber: panic on parsing crafted phonenumber inputsEPSS 0.7%Jul 7, 2024
- Low3.1sudo-rs: Path Traversal vulnerabilityEPSS 0.6%Nov 1, 2023
- High8.6blurhash: panic on parsing crafted blurhash inputsEPSS 0.6%Sep 19, 2023
- High8.6phonenumber: panic on parsing crafted RF3966 phonenumber inputsEPSS 0.9%Sep 19, 2023
- Medium6.8git2-rs fails to verify SSH keys by defaultEPSS 0.6%Jan 20, 2023
- UnknownXSS in ammonia via SVG , , and/or tagsOct 10, 2021
21 records · page 1 of 1
PreviousNext