Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0242 | Safe ErrorRegistry APIs can cause undefined behavior | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0240 | Ed25519 identity public keys permit universal signature forgery | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0239 | Streaming AEAD does not authenticate stream structure | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0238 | Low-level GCM ignores the operation nonce | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0244 | `setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization | 2026-08-06T12:00:00Z | 2026-08-09T13:42:26Z |
| rustsec-2026-0236 | A `BigInt` division panics, and two neighbouring operations answer wrongly in silence | 2026-08-06T12:00:00Z | 2026-08-06T09:00:34Z |
| rustsec-2026-0243 | `nostr-relay-pool` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0241 | `nostr-keyring` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0237 | `nostr-relay-builder` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0232 | Processing of unverified relay events | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0231 | Relay authentication challenges can exhaust memory | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0230 | Empty NIP-50 search filters can panic | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0229 | NIP-98 authorization parsing permits resource exhaustion | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0228 | NIP-04 parsing amplifies malformed ciphertext memory use | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0227 | NIP-44 v2 decryption permits resource exhaustion | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0226 | Wallet event parsers accept unauthenticated events | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0225 | Debug output exposes NIP-46 and NIP-60 credentials | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0224 | Verification cache poisoning allows forged Nostr events to bypass signature validation | 2026-08-01T12:00:00Z | 2026-08-01T15:02:54Z |
| rustsec-2026-0223 | Preemption and traps during bulk operations enable breaking internal VM state | 2026-07-31T12:00:00Z | 2026-07-31T16:37:42Z |
| rustsec-2026-0222 | Stores can mix up type indices between engines | 2026-07-31T12:00:00Z | 2026-07-31T16:37:42Z |
| rustsec-2026-0219 | Remote Denial of Service via malformed NIP-04 IV | 2026-07-26T12:00:00Z | 2026-08-01T11:36:43Z |
| rustsec-2026-0216 | Remote Denial of Service via malformed NIPβ44 v2 payload | 2026-07-25T12:00:00Z | 2026-08-01T11:36:43Z |
| rustsec-2026-0215 | smallstr is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2026-0214 | gumdrop is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2026-0218 | `Enum` trait allows type confusion when manually implemented | 2026-07-21T12:00:00Z | 2026-07-28T18:34:53Z |
| rustsec-2026-0213 | XSS in ammonia via SVG `animate` and `set` animation tags | 2026-07-21T12:00:00Z | 2026-07-22T08:15:44Z |
| rustsec-2026-0210 | `libcrux-aesgcm` Renamed to `libcrux-aes` | 2026-07-15T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0211 | Non-constant time Authentication Tag Check in AES-GCM Decryption | 2026-07-14T12:00:00Z | 2026-07-17T11:34:24Z |
| rustsec-2026-0221 | `event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot` | 2026-07-13T12:00:00Z | 2026-07-31T12:11:10Z |
| rustsec-2026-0206 | `rustybuzz` is unmaintained | 2026-07-11T12:00:00Z | 2026-07-12T07:10:54Z |