crates.io

MAL-2026-19200

crates.io/basek

Malicious code in basek (crates.io) 13 hours ago

No fix available

MAL-2026-19201

crates.io/hesk

Malicious code in hesk (crates.io) 13 hours ago

No fix available

RUSTSEC-2026-0501

crates.io/bsv-rs

Shamir backup recovery accepts a share at x = 0, so a supplied share can... 23 hours ago

Fix available
Severity - 9.1 (Critical)

RUSTSEC-2026-0497

crates.io/bsv-rs

Transaction::from_json holds an input txid that is not 64 hex digits and writes... yesterday

Fix available
Severity - 5.3 (Medium)

RUSTSEC-2026-0499

crates.io/bsv-rs

Signature::from_der reads a signature with bytes after it, a wrong sequence... yesterday

Fix available
Severity - 5.3 (Medium)

RUSTSEC-2026-0510

crates.io/vodozemac

Panic when decoding malformed Ed25519 keys from Base64 yesterday

Fix available

RUSTSEC-2026-0480

crates.io/tdx_workload_attestation

Panic on a GCP launch endorsement without TDX measurements 2 days ago

Fix available
Severity - 5.7 (Medium)

RUSTSEC-2026-0481

crates.io/tdx_workload_attestation

`verify_x509_cert` does not check the certificate validity period 2 days ago

Fix available
Severity - 5.9 (Medium)

RUSTSEC-2026-0483

crates.io/lwd-uri-util

`lwd-uri-util` was removed from crates.io for malicious code 2 days ago

No fix available

RUSTSEC-2026-0498

crates.io/bsv-rs

Transaction readers accept trailing bytes, so a parsed transaction can carry... 2 days ago

Fix available
Severity - 5.3 (Medium)

RUSTSEC-2026-0500

crates.io/bsv-rs

BEEF validation answers valid for a raw entry that is not a transaction 2 days ago

Fix available
Severity - 7.5 (High)

MAL-2026-19058

crates.io/lwd-uri-util

Malicious code in lwd_uri_util (crates.io) 3 days ago

No fix available

RUSTSEC-2026-0464

crates.io/webhook_commands

`webhook_commands` was removed from crates.io for malicious code 3 days ago

No fix available

RUSTSEC-2026-0465

crates.io/electrumd

`electrumd` was removed from crates.io for malicious code 3 days ago

No fix available

RUSTSEC-2026-0469

crates.io/env-test-guard

`env-test-guard` was removed from crates.io for malicious code 3 days ago

No fix available

RUSTSEC-2026-0470

crates.io/gabby-types-sec

`gabby-types-sec` was removed from crates.io for malicious code 3 days ago

No fix available

Vulnerabilities