Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0236 | A `BigInt` division panics, and two neighbouring operations answer wrongly in silence | 2026-08-06T12:00:00Z | 2026-08-06T09:00:34Z |
| rustsec-2026-0235 | Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc | 2026-05-13T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0234 | Insufficient archive validation can cause out-of-bounds reads in archives containing hash tables | 2026-05-11T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0233 | Crafted archives can cause a use-after-free during deserialization | 2026-05-11T12:00:00Z | 2026-08-04T09:27:20Z |
| rustsec-2026-0232 | Processing of unverified relay events | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0231 | Relay authentication challenges can exhaust memory | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0230 | Empty NIP-50 search filters can panic | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0229 | NIP-98 authorization parsing permits resource exhaustion | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0228 | NIP-04 parsing amplifies malformed ciphertext memory use | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0227 | NIP-44 v2 decryption permits resource exhaustion | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0226 | Wallet event parsers accept unauthenticated events | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0225 | Debug output exposes NIP-46 and NIP-60 credentials | 2026-08-01T12:00:00Z | 2026-08-02T17:56:20Z |
| rustsec-2026-0224 | Verification cache poisoning allows forged Nostr events to bypass signature validation | 2026-08-01T12:00:00Z | 2026-08-01T15:02:54Z |
| rustsec-2026-0219 | Remote Denial of Service via malformed NIP-04 IV | 2026-07-26T12:00:00Z | 2026-08-01T11:36:43Z |
| rustsec-2026-0216 | Remote Denial of Service via malformed NIPβ44 v2 payload | 2026-07-25T12:00:00Z | 2026-08-01T11:36:43Z |
| rustsec-2026-0223 | Preemption and traps during bulk operations enable breaking internal VM state | 2026-07-31T12:00:00Z | 2026-07-31T16:37:42Z |
| rustsec-2026-0222 | Stores can mix up type indices between engines | 2026-07-31T12:00:00Z | 2026-07-31T16:37:42Z |
| rustsec-2026-0221 | `event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot` | 2026-07-13T12:00:00Z | 2026-07-31T12:11:10Z |
| rustsec-2026-0220 | Uint shift operations: incorrect overflow flags and truncated shift amounts | 2026-07-08T12:00:00Z | 2026-07-30T19:13:51Z |
| rustsec-2026-0141 | TLS hostname verification disabled when using Boring TLS backend | 2026-05-14T12:00:00Z | 2026-07-29T06:03:48Z |
| rustsec-2026-0218 | `Enum` trait allows type confusion when manually implemented | 2026-07-21T12:00:00Z | 2026-07-28T18:34:53Z |
| rustsec-2026-0217 | Integer overflow in tract-nnef NNEF tensor parser leads to out-of-bounds read on model load | 2026-06-18T12:00:00Z | 2026-07-28T18:34:53Z |
| rustsec-2026-0185 | Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly | 2026-06-22T12:00:00Z | 2026-07-25T06:55:52Z |
| rustsec-2026-0215 | smallstr is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2026-0214 | gumdrop is unmaintained | 2026-07-22T12:00:00Z | 2026-07-23T07:15:03Z |
| rustsec-2025-0154 | `replit_ruspty` was removed from crates.io for malicious code | 2025-11-04T12:00:00Z | 2026-07-23T06:53:26Z |
| rustsec-2023-0085 | HPACK decoder panics on invalid input | 2023-09-15T12:00:00Z | 2026-07-22T17:32:51Z |
| rustsec-2026-0213 | XSS in ammonia via SVG `animate` and `set` animation tags | 2026-07-21T12:00:00Z | 2026-07-22T08:15:44Z |
| rustsec-2026-0104 | Reachable panic in certificate revocation list parsing | 2026-04-22T12:00:00Z | 2026-07-17T15:52:38Z |
| rustsec-2026-0099 | Name constraints were accepted for certificates asserting a wildcard name | 2026-04-14T12:00:00Z | 2026-07-17T15:52:38Z |