crates.io

RUSTSEC-2026-0305

crates.io/librsvg

Use-after-free when XML includes have duplicated entities 14 hours ago

Fix available

GHSA-m8f5-rh7h-vgg3

crates.io/microsandbox

microsandbox: Secret values exposed in world-readable process arguments yesterday

Fix available
Severity - 6.5 (Medium)

RUSTSEC-2026-0299

crates.io/owned-alloc

`owned-alloc` is unmaintained yesterday

No fix available

RUSTSEC-2026-0301

crates.io/stack_collections

Double free in `StackVec::retain` when a predicate or element `Drop` panics yesterday

Fix available

RUSTSEC-2026-0302

crates.io/stack-graphs

`stack-graphs` C API exports are safe `extern "C"` functions yesterday

No fix available

RUSTSEC-2026-0303

crates.io/stack-graphs

`stack-graphs` is archived and unmaintained yesterday

No fix available

RUSTSEC-2026-0293

crates.io/ringbuf

Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics 2 days ago

Fix available

RUSTSEC-2026-0296

crates.io/unzip

`unzip` is unmaintained 2 days ago

No fix available

RUSTSEC-2026-0304

crates.io/connectrpc

Finished streaming calls keep reading a stalled request body indefinitely 2 days ago

Fix available
Severity - 6.3 (Medium)

RUSTSEC-2026-0306

crates.io/faster-hex

`hex_decode_unchecked` AVX2 path reads past `src` 3 days ago

Fix available

RUSTSEC-2026-0294

crates.io/iceoryx2-bb-container

Unsoundness in UTF-8 'String' trait 5 days ago

Fix available

GHSA-4rf6-qx84-q9fv

crates.io/fulgur

Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service) 6 days ago

Fix available
Severity - 7.5 (High)

GHSA-j5cx-ph8g-95v3

crates.io/fulgur

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service 6 days ago

Fix available
Severity - 7.5 (High)

GHSA-9g45-5xwm-f3wc

crates.io/rmcp

RMCP: Custom HTTP headers leak to cross-origin redirect targets 6 days ago

Fix available
Severity - 6.8 (Medium)

RUSTSEC-2026-0287

crates.io/cosmian_kyber

cosmian_kyber is unmaintained 6 days ago

No fix available

RUSTSEC-2026-0289

crates.io/pqc_kyber

pqc_kyber is unmaintained 6 days ago

No fix available

Vulnerabilities