Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0455 | Large-window Brotli bodies bypass decompression memory limits | 2026-11-06T12:00:00Z | 2026-11-06T15:34:32Z |
| rustsec-2026-0454 | Data race and double free via unsound `Send`/`Sync` in `reblessive` | 2026-11-03T12:00:00Z | 2026-11-06T15:34:32Z |
| rustsec-2026-0453 | Use-after-free in KV backends via leaked `affinitypool::spawn_local` future | 2026-10-19T12:00:00Z | 2026-11-06T15:34:32Z |
| rustsec-2026-0452 | Out-of-bounds read when decoding internal keys shorter than 16 bytes | 2026-11-03T12:00:00Z | 2026-11-06T15:34:32Z |
| rustsec-2026-0451 | Degraded secret zeroization capabilities | 2026-11-06T12:00:00Z | 2026-11-06T15:34:32Z |
| rustsec-2026-0450 | `ocipkg`: unpacking an OCI archive can write and delete files outside the local image store (path traversal) | 2026-10-30T12:00:00Z | 2026-11-06T14:42:53Z |
| rustsec-2026-0449 | `ocipkg` is unmaintained | 2026-11-05T12:00:00Z | 2026-11-06T14:42:53Z |
| rustsec-2026-0448 | Unbounded decompression can exhaust memory and CPU resources | 2026-11-06T12:00:00Z | 2026-11-06T14:42:53Z |
| rustsec-2026-0447 | Compressed request bodies can exhaust memory before extractor limits apply | 2026-11-06T12:00:00Z | 2026-11-06T14:42:53Z |
| rustsec-2026-0446 | Request smuggling through malformed chunked request trailers | 2026-11-06T12:00:00Z | 2026-11-06T14:33:54Z |
| rustsec-2026-0445 | Degraded secret zeroization capabilities | 2026-11-06T12:00:00Z | 2026-11-06T14:33:54Z |
| rustsec-2026-0444 | `astral-tl` is unmaintained | 2026-10-05T12:00:00Z | 2026-11-06T14:33:54Z |
| rustsec-2026-0443 | Hidden file disclosure through Windows short names | 2026-11-06T12:00:00Z | 2026-11-06T14:33:54Z |
| rustsec-2026-0442 | Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads | 2026-11-02T12:00:00Z | 2026-11-05T08:50:49Z |
| rustsec-2026-0441 | `pin-utils` is unmaintained | 2026-10-01T12:00:00Z | 2026-11-05T08:50:49Z |
| rustsec-2026-0440 | `astral-tokio-tar` is unmaintained | 2026-11-03T12:00:00Z | 2026-11-05T08:50:49Z |
| rustsec-2026-0439 | Rejected authentication challenges can poison the Key Vault scope cache | 2026-08-24T12:00:00Z | 2026-11-05T08:50:49Z |
| rustsec-2026-0438 | Rejected authentication challenges can poison the Key Vault scope cache | 2026-08-24T12:00:00Z | 2026-11-05T08:50:49Z |
| rustsec-2026-0437 | Rejected authentication challenges can poison the Key Vault scope cache | 2026-08-24T12:00:00Z | 2026-11-05T08:50:49Z |
| rustsec-2026-0436 | Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input | 2026-10-28T12:00:00Z | 2026-11-03T09:44:19Z |
| rustsec-2026-0435 | Unbounded memory allocation in `thrift` binary protocol `read_bytes` | 2026-11-02T12:00:00Z | 2026-11-02T11:45:44Z |
| rustsec-2026-0434 | `ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip) | 2026-10-31T12:00:00Z | 2026-11-02T11:17:24Z |
| rustsec-2026-0433 | Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS` | 2026-10-28T12:00:00Z | 2026-11-02T11:17:24Z |
| rustsec-2026-0432 | `codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service) | 2026-10-31T12:00:00Z | 2026-11-02T11:17:24Z |
| rustsec-2026-0431 | Unbounded memory allocation in `evtx` parsing a `.wevtcache` file | 2026-11-01T12:00:00Z | 2026-11-02T10:46:59Z |
| rustsec-2026-0430 | Path traversal in `rio-vt` Kitty graphics protocol handler allows out-of-bounds file delete (and read) | 2026-11-01T12:00:00Z | 2026-11-02T10:46:59Z |
| rustsec-2026-0429 | zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size | 2026-10-22T12:00:00Z | 2026-11-02T09:50:37Z |
| rustsec-2026-0406 | Use-after-free when changing a multithreaded context with an unfinished frame | 2026-10-16T12:00:00Z | 2026-11-02T09:18:23Z |
| rustsec-2026-0405 | Out-of-bounds read with an out-of-range `InBuffer::pos` | 2026-10-16T12:00:00Z | 2026-11-02T09:18:23Z |
| rustsec-2026-0404 | Double free in `DCtx::try_clone` | 2026-10-16T12:00:00Z | 2026-11-02T09:18:23Z |