https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T01:42:16.721298+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2025-ui83674 CLEANSTART-2025-UI83674 — Security fix for ghsa-rr8g-9fpq-6wmg applied in: ztunnel-fips 1.25.5-r0 2026-10-01T01:42:16.723939+00:00

Affected: CleanStart: ztunnel-fips

Security vulnerability affects the ztunnel-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://db.gcve.eu/vuln/rustsec-2025-0023 RUSTSEC-2025-0023 — Broadcast channel calls clone in parallel, but does not require `Sync` 2026-10-01T01:42:16.724003+00:00

Affected: crates.io: tokio

The broadcast channel internally calls `clone` on the stored value when receiving it, and only requires `T:Send`. This means that using the broadcast channel with values that are `Send` but not `Sync` can trigger unsoundness if the `clone` implementation makes use of the value being `!Sync`.

Thank you to Austin Bonander for finding and reporting this issue.