crates.io

RUSTSEC-2026-0382

crates.io/rustls-webpki

Certificate verification may accept distrusted intermediates yesterday

Fix available

GHSA-4wc5-f2rc-q74m

crates.io/russh

russh: Unbounded memory allocation in agent protocol server via crafted... yesterday

Fix available
Severity - 4.3 (Medium)

GHSA-j7h2-66j4-ghjf

crates.io/russh

A russh SSH server accepts a publickey authentication whose signature uses a... yesterday

Fix available
Severity - 2.3 (Low)

RUSTSEC-2026-0375

crates.io/wasmtime-wasi-http

`wasi-http` p3: Guests can set incorrect content-length for spliced response... 2 days ago

Fix available
Severity - 5.3 (Medium)

RUSTSEC-2026-0376

crates.io/wasmtime-wasi-http

`wasi-http`: Guests can add conflicting content lengths to messages 2 days ago

Fix available
Severity - 3.7 (Low)

RUSTSEC-2026-0377

crates.io/wasmtime-wasi-http

`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header`... 2 days ago

Fix available
Severity - 3.7 (Low)

RUSTSEC-2026-0378

crates.io/wasmtime

Panic lowering a host-created component model stream into a guest that expects... 2 days ago

Fix available
Severity - 5.7 (Medium)

RUSTSEC-2026-0379

crates.io/wasmtime

Cranelift backend on aarch64 can jump to incorrect target on large Wasm... 2 days ago

Fix available
Severity - 9.9 (Critical)

RUSTSEC-2026-0380

crates.io/wasmtime

Bit-packing in Cranelift compiler causes silent overflow and miscompilation 2 days ago

Fix available
Severity - 9.9 (Critical)

RUSTSEC-2026-0381

crates.io/webpki-roots

Bundled root certificates allow trust in distrusted emSign intermediates 2 days ago

Fix available

RUSTSEC-2026-0383

crates.io/webpki-root-certs

Bundled root certificates allow trust in distrusted emSign intermediates 2 days ago

Fix available

GHSA-4ch3-9j33-3pmj

crates.io/wasmtime-wasi

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination 4 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-6fj4-rcr3-r7rr

crates.io/lopdf

lopdf has a stack overflow via deeply nested PDF objects 4 days ago

Fix available
Severity - 7.5 (High)

RUSTSEC-2026-0366

crates.io/pest_grammars

Stack overflow when parsing deeply nested input in pest_grammars 5 days ago

Fix available
Severity - 3.3 (Low)

RUSTSEC-2026-0370

crates.io/zvariant

`zvariant` is unmaintained 5 days ago

No fix available

RUSTSEC-2026-0371

crates.io/zbus_names

`zbus_names` is unmaintained 5 days ago

No fix available

Vulnerabilities