Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3763-qp59-59vf
  • crates.io/nimiq-blockchain
nimiq-blockchain: Validity store off by one error yesterday
  • Fix available
  • Severity - 7.5 (High)
RUSTSEC-2026-0252
  • crates.io/orx-split-vec
Panic-safety unsoundness in `SplitVec::extend_from_slice` (uninitialized read) 2 days ago
  • Fix available
RUSTSEC-2026-0254
  • crates.io/sp-sized-chunks
Panic-safety unsoundness in `Chunk` and `InlineArray` (use-after-free / double-free) 2 days ago
  • No fix available
RUSTSEC-2026-0255
  • crates.io/sized-chunks
Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free) 2 days ago
  • No fix available
RUSTSEC-2026-0256
  • crates.io/circular-buffer
Panic-safety unsoundness in `truncate_back`, `truncate_front`, `clear`, and `extend_from_slice` (use-after-free / double-free) 2 days ago
  • Fix available
RUSTSEC-2026-0238
  • crates.io/dcrypt-algorithms
Low-level GCM ignores the operation nonce 4 days ago
  • Fix available
RUSTSEC-2026-0239
  • crates.io/dcrypt-symmetric
Streaming AEAD does not authenticate stream structure 4 days ago
  • Fix available
RUSTSEC-2026-0240
  • crates.io/dcrypt-sign
Ed25519 identity public keys permit universal signature forgery 4 days ago
  • Fix available
RUSTSEC-2026-0242
  • crates.io/dcrypt-api
Safe ErrorRegistry APIs can cause undefined behavior 4 days ago
  • Fix available
RUSTSEC-2026-0236
  • crates.io/viperjs
A `BigInt` division panics, and two neighbouring operations answer wrongly in silence 06 Aug
  • Fix available
  • Severity - 7.5 (High)
RUSTSEC-2026-0244
  • crates.io/gettext-rs
`setlocale` and `TextDomain::init` are unsound as they access environment with no synchronization 06 Aug
  • Fix available
RUSTSEC-2026-0245
  • crates.io/sevenz-rust
Relative/Absolute Path Traversal (CWE-23/CWE-36) in `decompress_impl` that enables an arbitrary file write. 06 Aug
  • No fix available
  • Severity - 8.3 (High)
RUSTSEC-2026-0246
  • crates.io/sevenz-rust
`sevenz-rust` is unmaintained 06 Aug
  • No fix available
GHSA-m65r-rprj-r5rg
  • crates.io/russh
Russh: Channel-scoped server callbacks can be reached without an open channel 03 Aug
  • Fix available
  • Severity - 6.5 (Medium)
RUSTSEC-2026-0237
  • crates.io/nostr-relay-builder
`nostr-relay-builder` is unmaintained 03 Aug
  • No fix available
RUSTSEC-2026-0241
  • crates.io/nostr-keyring
`nostr-keyring` is unmaintained 03 Aug
  • No fix available