crates.io

GHSA-vp5q-ff62-jwqv

crates.io/russh

russh: Agent server never calls `Agent::confirm`, so keys added with the... 2 days ago

Fix available
Severity - 8.3 (High)

GHSA-662x-8wvj-2276

crates.io/pageant

pageant: unbounded frame buffering on peer-controlled 4-byte length prefix... 2 days ago

Fix available
Severity - 2.3 (Low)

GHSA-fw5c-8223-6h42

crates.io/russh

russh: peer-declared zero maximum packet size permanently stalls channel writes... 2 days ago

Fix available
Severity - 4.3 (Medium)

GHSA-9wfm-jcj8-jfv9

crates.io/russh

russh's SSH agent server is susceptible to unbound allocations via repeated... 2 days ago

Fix available
Severity - 3.3 (Low)

GHSA-4p9f-7p9m-5vfg

crates.io/russh

russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets 2 days ago

Fix available
Severity - 4.3 (Medium)

RUSTSEC-2026-0425

crates.io/nix-nar

`nix-nar`: `Decoder::unpack` writes archive entries outside the destination... 2 days ago

Fix available
Severity - 7.5 (High)

RUSTSEC-2026-0426

crates.io/orion

LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA... 2 days ago

Fix available

RUSTSEC-2026-0428

crates.io/orion

BLAKE2b produces wrong tag when using `reset()` with a different-length key 2 days ago

Fix available

GHSA-9hj8-73fh-9963

crates.io/zip

zip: legacy Shrink/Reduce/Implode decoder: denial of service from... 3 days ago

Fix available
Severity - 7.5 (High)

GHSA-hjqx-j4rw-g7xv

crates.io/zip

zip: Arbitrary file write outside the extraction directory, because... 3 days ago

Fix available
Severity - 7.4 (High)

GHSA-8hxf-qr8p-62x4

crates.io/zip

zip: AES Entry HMAC Authentication Bypass on Premature EOF 3 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-q7v9-x93c-xqv3

crates.io/zip

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During... 3 days ago

Fix available
Severity - 7.5 (High)

GHSA-c33x-vcv4-vg3g

crates.io/cedar-policy
npm/@cedar-policy/cedar-wasm

Cedar: JSON template is in scope missing slot-id validation allows link panic... 3 days ago

Fix available
Severity - 2.1 (Low)

RUSTSEC-2026-0419

crates.io/juniper_warp

Unbounded memory use on large request bodies 3 days ago

Fix available
Severity - 7.5 (High)

RUSTSEC-2026-0420

crates.io/wasmtime-wasi

wasip3 UDP `send` can deliver a datagram to an address only allowed for... 3 days ago

Fix available
Severity - 6.4 (Medium)

RUSTSEC-2026-0421

crates.io/wasmtime-wasi-http

wasi-http p2: outgoing content-length can be invalid or not match body 3 days ago

Fix available
Severity - 3.7 (Low)

Vulnerabilities