Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
OSV Rustsec π¦ is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| rustsec-2026-0333 | Resource budgets not enforced on the typed deserialization path | 2026-10-06T12:00:00Z | 2026-10-08T14:47:14Z |
| rustsec-2026-0332 | `WaveFormat::parse` reads past the end of a `&WAVEFORMATEX` | 2026-09-08T12:00:00Z | 2026-10-07T14:40:27Z |
| rustsec-2026-0331 | Panic on Decoding Short Hybrid Keys | 2026-08-24T12:00:00Z | 2026-10-07T08:23:44Z |
| rustsec-2026-0330 | Hybrid Encapsulation from Seed Panics on Short Seed | 2026-09-28T12:00:00Z | 2026-10-07T08:23:44Z |
| rustsec-2026-0329 | Auto-Reseeding HMAC-DRBG could panic for some output lengths | 2026-08-03T12:00:00Z | 2026-10-07T08:23:44Z |
| rustsec-2024-0448 | `parse_arguments` reads a caller-supplied pointer as a slice | 2024-11-25T12:00:00Z | 2026-10-03T08:14:03Z |
| rustsec-2026-0328 | `decompress`: tar-family extractors write archive entries without a path-traversal check (tar-slip) | 2026-09-19T12:00:00Z | 2026-10-03T07:29:09Z |
| rustsec-2026-0223 | Preemption and traps during bulk operations enable breaking internal VM state | 2026-07-31T12:00:00Z | 2026-10-03T07:19:45Z |
| rustsec-2026-0327 | Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0326 | Rooting for GC values live across `try_call` may be missing, causing GC heap corruption | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0325 | Mis-typed WebAssembly tag imports can lead to GC heap corruption | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0324 | Guest can panic host through filesystem timestamp before the epoch on wasip3 | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0323 | fd_readdir copies uninitialized struct padding into guest memory | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0322 | Excessive allocated memory on the host when guests don't have stdio | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0321 | WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0320 | Wasmtime wasi:http implementation panics with a zero timeout supplied | 2026-10-02T12:00:00Z | 2026-10-02T20:27:46Z |
| rustsec-2026-0319 | anymap2 is unmaintained | 2026-10-02T12:00:00Z | 2026-10-02T08:58:33Z |
| rustsec-2026-0318 | Sending custom to-device messages may panics | 2026-09-29T12:00:00Z | 2026-10-01T20:25:27Z |
| rustsec-2026-0305 | Use-after-free when XML includes have duplicated entities | 2026-09-23T12:00:00Z | 2026-10-01T19:14:05Z |
| rustsec-2026-0317 | A 512-byte workbook can provoke a multi-gigabyte allocation and abort the process | 2026-09-29T12:00:00Z | 2026-10-01T07:31:41Z |
| rustsec-2026-0213 | XSS in ammonia via SVG `animate` and `set` animation tags | 2026-07-21T12:00:00Z | 2026-09-30T07:15:39Z |
| rustsec-2026-0316 | Dynamic record lifting can allocate beyond the hostcall fuel limit | 2026-09-24T12:00:00Z | 2026-09-29T07:32:15Z |
| rustsec-2026-0315 | `call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification | 2026-09-24T12:00:00Z | 2026-09-29T07:32:15Z |
| rustsec-2026-0314 | Guest can panic host through filesystem datetime overflow | 2026-09-24T12:00:00Z | 2026-09-29T07:32:15Z |
| rustsec-2026-0313 | Outgoing HTTP body write allows guest-driven host memory exhaustion | 2026-09-24T12:00:00Z | 2026-09-29T07:32:15Z |
| rustsec-2026-0312 | Excluded iPAddress name constraints with an all-zero mask are not applied | 2026-09-24T12:00:00Z | 2026-09-28T09:30:11Z |
| rustsec-2026-0311 | Stack overflow on deeply nested LaTeX input | 2026-09-27T12:00:00Z | 2026-09-28T08:34:35Z |
| rustsec-2026-0310 | Various panics, soundness and resource exhaustion issues | 2026-09-25T12:00:00Z | 2026-09-25T17:51:57Z |
| rustsec-2026-0309 | `SinglyLinkedList::remove` dereferences a null link | 2026-09-20T12:00:00Z | 2026-09-25T17:51:57Z |
| rustsec-2018-0011 | Enum repr causing potential memory corruption | 2018-12-18T12:00:00Z | 2026-09-25T14:37:42Z |