crates.io

RUSTSEC-2026-0385

crates.io/ctutils

Non-constant-time mask generation and `u128` comparisons 4 hours ago

Fix available

GHSA-cpvr-w4j5-2mpg

crates.io/librsvg

Librsvg: Use-after-free when XML includes have duplicated entities yesterday

Fix available
Severity - 7.8 (High)

GHSA-9jh8-v38h-cvhr

crates.io/ammonia

ammonia: mXSS via MathML `annotation-xml` encoding strip yesterday

Fix available
Severity - 6.3 (Medium)

GHSA-26w4-8w32-4x3v

crates.io/slack-morphism

Slack Morphism verifier errors disclose valid HMACs in the logs 2 days ago

Fix available
Severity - 5.3 (Medium)

RUSTSEC-2026-0384

crates.io/tokio

Race condition in `tokio::time::Interval` on Tokio v1.54.0 2 days ago

Fix available

RUSTSEC-2026-0382

crates.io/rustls-webpki

Certificate verification may accept distrusted intermediates 3 days ago

Fix available

GHSA-4wc5-f2rc-q74m

crates.io/russh

russh: Unbounded memory allocation in agent protocol server via crafted... 3 days ago

Fix available
Severity - 4.3 (Medium)

GHSA-j7h2-66j4-ghjf

crates.io/russh

A russh SSH server accepts a publickey authentication whose signature uses a... 3 days ago

Fix available
Severity - 2.3 (Low)

RUSTSEC-2026-0375

crates.io/wasmtime-wasi-http

`wasi-http` p3: Guests can set incorrect content-length for spliced response... 4 days ago

Fix available
Severity - 5.3 (Medium)

RUSTSEC-2026-0376

crates.io/wasmtime-wasi-http

`wasi-http`: Guests can add conflicting content lengths to messages 4 days ago

Fix available
Severity - 3.7 (Low)

RUSTSEC-2026-0377

crates.io/wasmtime-wasi-http

`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header`... 4 days ago

Fix available
Severity - 3.7 (Low)

RUSTSEC-2026-0378

crates.io/wasmtime

Panic lowering a host-created component model stream into a guest that expects... 4 days ago

Fix available
Severity - 5.7 (Medium)

RUSTSEC-2026-0379

crates.io/wasmtime

Cranelift backend on aarch64 can jump to incorrect target on large Wasm... 4 days ago

Fix available
Severity - 9.9 (Critical)

RUSTSEC-2026-0380

crates.io/wasmtime

Bit-packing in Cranelift compiler causes silent overflow and miscompilation 4 days ago

Fix available
Severity - 9.9 (Critical)

RUSTSEC-2026-0381

crates.io/webpki-roots

Bundled root certificates allow trust in distrusted emSign intermediates 4 days ago

Fix available

RUSTSEC-2026-0383

crates.io/webpki-root-certs

Bundled root certificates allow trust in distrusted emSign intermediates 4 days ago

Fix available

Vulnerabilities