crates.io

GHSA-vp88-798v-h67f

crates.io/rustls

rustls: ECH rejection can expose buffered application data to authenticated... 10 hours ago

Fix available
Severity - 2.3 (Low)

GHSA-w44r-93j7-qv28

crates.io/rustls

rustls: An unauthenticated ServerHello poisons the per-name key-exchange... 10 hours ago

Fix available
Severity - 3.7 (Low)

GHSA-c8m5-c952-6cm4

crates.io/rustls

Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs 10 hours ago

Fix available
Severity - 4.0 (Medium)

GHSA-h2v8-394m-p7vv

crates.io/rustls

Rustls: Brotli certificate decompression can allocate an attacker-controlled... 10 hours ago

Fix available
Severity - 3.7 (Low)

RUSTSEC-2026-0412

crates.io/cargo-nextest

Arbitrary code execution when rerunning tests from a portable recording yesterday

Fix available
Severity - 7.8 (High)

RUSTSEC-2026-0413

crates.io/rustls-ffi

Use-after-free of caller-owned server name in client connection constructors yesterday

Fix available

RUSTSEC-2026-0408

crates.io/skiplist

Aliasing violations in splice, mutable iteration and cursors 3 days ago

Fix available
Severity - 2.1 (Low)

RUSTSEC-2026-0409

crates.io/skiplist

Use-after-free from a comparator that answers inconsistently 3 days ago

Fix available
Severity - 6.3 (Medium)

GHSA-9pvw-hwfg-92h5

crates.io/wasmtime

Wasmtime: Panic lowering a host-created component model stream into a guest... 4 days ago

Fix available
Severity - 5.7 (Medium)

GHSA-897f-g5gm-fmxm

crates.io/wasmtime

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and... 4 days ago

Fix available
Severity - 9.9 (Critical)

GHSA-h4fr-cmh5-qr62

crates.io/fallow-cli
crates.io/fallow-config
crates.io/fallow-core
npm/@fallow-cli/fallow-node
npm/fallow

Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths... 4 days ago

Fix available
Severity - 3.3 (Low)

GHSA-jfwm-3p3c-6hx5

crates.io/fallow-cli
crates.io/fallow-core
npm/@fallow-cli/fallow-node
npm/fallow

Fallow: Jest and Vitest `projects` entries let an analyzed repository make... 4 days ago

Fix available
Severity - 3.3 (Low)

GHSA-5wjr-9356-4wc8

crates.io/tokio

Tokio: Race condition in `tokio::time::Interval` 4 days ago

Fix available
Severity - 5.8 (Medium)

GHSA-q54r-jf2p-rfr2

crates.io/gix

gitoxide gix: untrusted .git/config disables filesystem .git-protection path... 4 days ago

Fix available
Severity - 7.3 (High)

RUSTSEC-2026-0385

crates.io/ctutils

Non-constant-time mask generation and `u128` comparisons 4 days ago

Fix available

RUSTSEC-2026-0387

crates.io/crypto-bigint

Multiple timing variability issues in operations intended to be constant-time 4 days ago

Fix available

Vulnerabilities