RUSTSEC-2026-0500

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2026-0500

Import Source

https://github.com/rustsec/advisory-db/blob/osv/crates/RUSTSEC-2026-0500.json

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2026-0500

Aliases

GHSA-j8hr-pjhm-6h27
RUSTSEC-2026-0498

Published

2026-11-10T12:00:00Z

Modified

2026-11-12T08:11:08Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

BEEF validation answers valid for a raw entry that is not a transaction

Details

Beef::merge_raw_tx and BeefTx::from_raw_tx accept raw bytes without a Result. For bytes that are not exactly one transaction (a transaction followed by bytes, a cut transaction, bytes that are no transaction at all), Beef::sort_txs, verify_structure, verify_valid and is_valid could answer valid, even with no BUMP and no parent in the BEEF, and, where the entry carried a BUMP index, treat the hash of those bytes as a proven transaction id; an entry that names it as a parent was answered valid too.

The wire readers (Beef::from_binary, verify_stream, Transaction::from_beef, from_atomic_beef) parse every entry and are not affected. Reaching this needs an application that passes bytes it did not parse to merge_raw_tx or BeefTx::from_raw_tx and then relies on the verdict or on the transaction the BEEF hands back.

0.8.5 refuses such an entry at all four verdict doors, with or without a BUMP index, and every entry that names it as a parent. Where upgrading is not possible, do not rely on is_valid or verify_valid alone for such an entry: check that the bytes are exactly one transaction before merging them.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

crates.io / bsv-rs

Package

Name: bsv-rs; View open source insights on deps.dev
Purl: pkg:cargo/bsv-rs

Affected ranges

Type: SEMVER
Events: Introduced

0.0.0-0

Fixed

0.8.5

Introduced

0.9.0-beta.1

Fixed

0.9.0-beta.7.0

Ecosystem specific

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [
            "bsv_rs::transaction::Beef::find_atomic_transaction",
            "bsv_rs::transaction::Beef::find_transaction_for_signing",
            "bsv_rs::transaction::Beef::is_valid",
            "bsv_rs::transaction::Beef::merge_raw_tx",
            "bsv_rs::transaction::Beef::sort_txs",
            "bsv_rs::transaction::Beef::verify_structure",
            "bsv_rs::transaction::Beef::verify_valid",
            "bsv_rs::transaction::BeefTx::from_raw_tx"
        ],
        "os": []
    }
}