Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0244 | `setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization | 2026-08-06T12:00:00Z | 2026-08-09T13:42:26Z |
| rustsec-2026-0243 | `nostr-relay-pool` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0242 | Safe ErrorRegistry APIs can cause undefined behavior | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0241 | `nostr-keyring` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0240 | Ed25519 identity public keys permit universal signature forgery | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0239 | Streaming AEAD does not authenticate stream structure | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0238 | Low-level GCM ignores the operation nonce | 2026-08-09T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0237 | `nostr-relay-builder` is unmaintained | 2026-08-03T12:00:00Z | 2026-08-09T12:34:06Z |
| rustsec-2026-0236 | A `BigInt` division panics, and two neighbouring operations answer wrongly in silence | 2026-08-06T12:00:00Z | 2026-08-06T09:00:34Z |
| rustsec-2026-0235 | Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc | 2026-05-13T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0234 | Insufficient archive validation can cause out-of-bounds reads in archives containing hash tables | 2026-05-11T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0233 | Crafted archives can cause a use-after-free during deserialization | 2026-05-11T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0232 | Processing of unverified relay events | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0231 | Relay authentication challenges can exhaust memory | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0230 | Empty NIP-50 search filters can panic | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0229 | NIP-98 authorization parsing permits resource exhaustion | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0228 | NIP-04 parsing amplifies malformed ciphertext memory use | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0227 | NIP-44 v2 decryption permits resource exhaustion | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0226 | Wallet event parsers accept unauthenticated events | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0225 | Debug output exposes NIP-46 and NIP-60 credentials | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0224 | Verification cache poisoning allows forged Nostr events to bypass signature validation | 2026-08-01T12:00:00Z | 2026-08-01T15:02:54Z |
| rustsec-2026-0219 | Remote Denial of Service via malformed NIP-04 IV | 2026-07-26T12:00:00Z | 2026-08-01T11:36:43Z |
| rustsec-2026-0216 | Remote Denial of Service via malformed NIPβ44 v2 payload | 2026-07-25T12:00:00Z | 2026-08-01T11:36:43Z |
| rustsec-2026-0223 | Preemption and traps during bulk operations enable breaking internal VM state | 2026-07-31T12:00:00Z | 2026-07-31T16:37:42Z |
| rustsec-2026-0222 | Stores can mix up type indices between engines | 2026-07-31T12:00:00Z | 2026-07-31T16:37:42Z |
| rustsec-2026-0221 | `event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot` | 2026-07-13T12:00:00Z | 2026-07-31T12:11:10Z |
| rustsec-2026-0220 | Uint shift operations: incorrect overflow flags and truncated shift amounts | 2026-07-08T12:00:00Z | 2026-07-30T19:13:51Z |
| rustsec-2026-0141 | TLS hostname verification disabled when using Boring TLS backend | 2026-05-14T12:00:00Z | 2026-07-29T06:03:48Z |
| rustsec-2026-0218 | `Enum` trait allows type confusion when manually implemented | 2026-07-21T12:00:00Z | 2026-07-28T18:34:53Z |
| rustsec-2026-0217 | Integer overflow in tract-nnef NNEF tensor parser leads to out-of-bounds read on model load | 2026-06-18T12:00:00Z | 2026-07-28T18:34:53Z |