# cve.now: crates.io packages

The newest entries affecting crates.io packages (up to 200). To check exact package versions, use the MCP check_stack tool or /stack.

- [RUSTSEC-2026-0425](https://cve.now/RUSTSEC-2026-0425.md): \`nix-nar\`: \`Decoder::unpack\` writes archive entries outside the destination directory (path traversal) (no CVSS, nix-nar)
- [RUSTSEC-2026-0426](https://cve.now/RUSTSEC-2026-0426.md): LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time (no CVSS, orion)
- [RUSTSEC-2026-0428](https://cve.now/RUSTSEC-2026-0428.md): BLAKE2b produces wrong tag when using \`reset()\` with a different-length key (no CVSS, orion)
- [GHSA-C33X-VCV4-VG3G](https://cve.now/GHSA-C33X-VCV4-VG3G.md): Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence (low (no CVSS), cedar-policy · @cedar-policy/cedar-wasm)
- [CVE-2026-119143](https://cve.now/CVE-2026-119143.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic via Zero-Length Stream Writes (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119142](https://cve.now/CVE-2026-119142.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via call\_async Drop (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119138](https://cve.now/CVE-2026-119138.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Panic After Trap (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119137](https://cve.now/CVE-2026-119137.md): Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Stack Overflow via Type Registry (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119136](https://cve.now/CVE-2026-119136.md): Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Async-Entrypoint Enforcement Bypass (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119132](https://cve.now/CVE-2026-119132.md): Wasmtime 49.0.0 before 49.0.3 Host Panic via Overlapping String Transcode in Fused Adapter (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-119131](https://cve.now/CVE-2026-119131.md): Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via wasi-http (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-119130](https://cve.now/CVE-2026-119130.md): Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 HTTP Request Target Smuggling (CVSS 2.1, bytecodealliance wasmtime · wasmtime-wasi-http)
- [RUSTSEC-2026-0419](https://cve.now/RUSTSEC-2026-0419.md): Unbounded memory use on large request bodies (no CVSS, juniper\_warp)
- [RUSTSEC-2026-0420](https://cve.now/RUSTSEC-2026-0420.md): wasip3 UDP \`send\` can deliver a datagram to an address only allowed for receiving (no CVSS, wasmtime-wasi)
- [RUSTSEC-2026-0421](https://cve.now/RUSTSEC-2026-0421.md): wasi-http p2: outgoing content-length can be invalid or not match body (no CVSS, wasmtime-wasi-http)
- [RUSTSEC-2026-0422](https://cve.now/RUSTSEC-2026-0422.md): Typed functions with \`i31\` or \`nullref\` arguments may panic due to insufficient type-check (no CVSS, wasmtime)
- [RUSTSEC-2026-0423](https://cve.now/RUSTSEC-2026-0423.md): Cross-engine type confusion with host-created struct-types-with-supertypes (no CVSS, wasmtime)
- [RUSTSEC-2026-0424](https://cve.now/RUSTSEC-2026-0424.md): Unchecked memory usage in transferring borrowed resources between components (no CVSS, wasmtime)
- [RUSTSEC-2026-0427](https://cve.now/RUSTSEC-2026-0427.md): \`sn-releases\`: \`extract\_release\_archive\` writes archive entries without a path-traversal check (zip-slip) (no CVSS, sn-releases)
- [RUSTSEC-2026-0415](https://cve.now/RUSTSEC-2026-0415.md): Unbounded memory use on large request bodies (no CVSS, juniper\_hyper)
- [RUSTSEC-2026-0416](https://cve.now/RUSTSEC-2026-0416.md): Stack overflow on deeply nested GraphQL documents (no CVSS, juniper)
- [RUSTSEC-2026-0417](https://cve.now/RUSTSEC-2026-0417.md): Excessive CPU and memory use on crafted GraphQL documents (no CVSS, juniper)
- [RUSTSEC-2026-0418](https://cve.now/RUSTSEC-2026-0418.md): libz-sys build script leaks environment variables in the build directory (no CVSS, libz-sys)
- [GHSA-VP88-798V-H67F](https://cve.now/GHSA-VP88-798V-H67F.md): rustls: ECH rejection can expose buffered application data to authenticated outer server before \`ech\_required\` alert (low (no CVSS), rustls)
- [GHSA-W44R-93J7-QV28](https://cve.now/GHSA-W44R-93J7-QV28.md): rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share (low (no CVSS), rustls)
- [GHSA-C8M5-C952-6CM4](https://cve.now/GHSA-C8M5-C952-6CM4.md): Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs (medium (no CVSS), rustls)
- [GHSA-H2V8-394M-P7VV](https://cve.now/GHSA-H2V8-394M-P7VV.md): Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. (low (no CVSS), rustls)
- [CVE-2026-115909](https://cve.now/CVE-2026-115909.md): zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction (CVSS 7.5, zip-rs zip2 · zip)
- [CVE-2026-115908](https://cve.now/CVE-2026-115908.md): zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0) (CVSS 7.4, zip-rs zip2 · zip)
- [CVE-2026-115907](https://cve.now/CVE-2026-115907.md): zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size (CVSS 7.5, zip-rs zip2 · zip)
- [CVE-2026-115906](https://cve.now/CVE-2026-115906.md): zip: AES Entry HMAC Authentication Bypass on Premature EOF (CVSS 6.5, zip-rs zip2 · zip)
- [CVE-2026-115905](https://cve.now/CVE-2026-115905.md): zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE (CVSS 10.0, zip-rs zip2 · zip)
- [RUSTSEC-2026-0412](https://cve.now/RUSTSEC-2026-0412.md): Arbitrary code execution when rerunning tests from a portable recording (no CVSS, cargo-nextest)
- [RUSTSEC-2026-0413](https://cve.now/RUSTSEC-2026-0413.md): Use-after-free of caller-owned server name in client connection constructors (no CVSS, rustls-ffi)
- [RUSTSEC-2026-0408](https://cve.now/RUSTSEC-2026-0408.md): Aliasing violations in splice, mutable iteration and cursors (no CVSS, skiplist)
- [RUSTSEC-2026-0409](https://cve.now/RUSTSEC-2026-0409.md): Use-after-free from a comparator that answers inconsistently (no CVSS, skiplist)
- [GHSA-H4FR-CMH5-QR62](https://cve.now/GHSA-H4FR-CMH5-QR62.md): Fallow: A \`.\*\` glob segment let an analyzed repository make Fallow test paths in the parent of the project root (low (no CVSS), fallow · @fallow-cli/fallow-node +3)
- [CVE-2026-115893](https://cve.now/CVE-2026-115893.md): Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm \`br\_table\` instruction (CVSS 9.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115892](https://cve.now/CVE-2026-115892.md): Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type (CVSS 5.7, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115889](https://cve.now/CVE-2026-115889.md): Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation (CVSS 9.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115569](https://cve.now/CVE-2026-115569.md): Fallow: Jest and Vitest \`projects\` entries let an analyzed repository make Fallow read files outside the project root (CVSS 3.3, fallow-rs fallow · @fallow-cli fallow-node +6)
- [CVE-2026-115567](https://cve.now/CVE-2026-115567.md): Tokio: Race condition in \`tokio::time::Interval\` (CVSS 5.8, tokio-rs tokio · tokio)
- [RUSTSEC-2026-0387](https://cve.now/RUSTSEC-2026-0387.md): Multiple timing variability issues in operations intended to be constant-time (no CVSS, crypto-bigint)
- [CVE-2026-115393](https://cve.now/CVE-2026-115393.md): Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 Cross-Engine Type Confusion (CVSS 1.0, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115392](https://cve.now/CVE-2026-115392.md): Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes (CVSS 8.8, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115391](https://cve.now/CVE-2026-115391.md): Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 Unbounded Heap Allocation via WASIp3 Streams (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115390](https://cve.now/CVE-2026-115390.md): Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115389](https://cve.now/CVE-2026-115389.md): Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API (CVSS 1.0, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115388](https://cve.now/CVE-2026-115388.md): Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-115387](https://cve.now/CVE-2026-115387.md): Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-115386](https://cve.now/CVE-2026-115386.md): Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd\_readdir (CVSS 2.1, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-115385](https://cve.now/CVE-2026-115385.md): Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps (CVSS 6.9, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-115384](https://cve.now/CVE-2026-115384.md): Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow (CVSS 9.4, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115383](https://cve.now/CVE-2026-115383.md): Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports (CVSS 5.9, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-115382](https://cve.now/CVE-2026-115382.md): Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 wasi:http Zero Timeout Panic DoS (CVSS 5.9, bytecodealliance wasmtime · wasmtime-wasi-http)
- [CVE-2026-115381](https://cve.now/CVE-2026-115381.md): Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Unbounded Host Memory Allocation via SinkOutputStream write-zeroes (CVSS 5.9, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-115380](https://cve.now/CVE-2026-115380.md): Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Fuel Limit Bypass DoS via WASI Preview 0 poll\_oneoff (CVSS 5.1, bytecodealliance wasmtime · wasmtime-wasi)
- [CVE-2026-115379](https://cve.now/CVE-2026-115379.md): Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try\_call (CVSS 6.9, bytecodealliance wasmtime · wasmtime)
- [RUSTSEC-2026-0407](https://cve.now/RUSTSEC-2026-0407.md): SSRF and local file disclosure via unvalidated URLs (no CVSS, webpage)
- [RUSTSEC-2026-0411](https://cve.now/RUSTSEC-2026-0411.md): Out-of-bounds read in \`Log2Cache::nlog2n()\`, \`nlog2n\_difference()\` and \`plog2p()\` (no CVSS, dahl-salso)
- [CVE-2026-113799](https://cve.now/CVE-2026-113799.md): Slack Morphism verifier errors disclose valid HMACs in the logs (CVSS 5.3, abdolence slack-morphism-rust · slack-morphism)
- [CVE-2026-111943](https://cve.now/CVE-2026-111943.md): Distrust compromised intermediate certificates in crypto/x509 (CVSS 6.8, Go standard library crypto/x509 · stdlib +3)
- [CVE-2026-114109](https://cve.now/CVE-2026-114109.md): uv before 0.11.15 Arbitrary File Write via Entry Point Names (CVSS 8.7, astral-sh uv · uv)
- [CVE-2026-105299](https://cve.now/CVE-2026-105299.md): Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments (CVSS 8.7, https://github.com/cloudflare/pingora · pingora-proxy)
- [CVE-2026-105298](https://cve.now/CVE-2026-105298.md): Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass (CVSS 6.3, https://github.com/cloudflare/pingora · pingora-core)
- [CVE-2026-105297](https://cve.now/CVE-2026-105297.md): Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits (CVSS 7.5, https://github.com/cloudflare/pingora · pingora-core)
- [CVE-2026-111061](https://cve.now/CVE-2026-111061.md): russh agent server converts constraint records into unbounded never-rolled-back tasks (CVSS 4.3, Eugeny russh · russh)
- [RUSTSEC-2026-0414](https://cve.now/RUSTSEC-2026-0414.md): Exponential event growth with \`ENABLE\_WIKILINKS\` (no CVSS, pulldown-cmark)
- [RUSTSEC-2026-0391](https://cve.now/RUSTSEC-2026-0391.md): Data from an abandoned stream leaks into the next stream on a reused context (no CVSS, zstd)
- [RUSTSEC-2026-0392](https://cve.now/RUSTSEC-2026-0392.md): Uninitialized memory exposed by \`write::Decoder\` on a corrupt legacy frame (no CVSS, zstd)
- [RUSTSEC-2026-0393](https://cve.now/RUSTSEC-2026-0393.md): Out-of-bounds read when training a dictionary from inconsistent sample sizes (no CVSS, zstd)
- [RUSTSEC-2026-0395](https://cve.now/RUSTSEC-2026-0395.md): Use-after-free with \`CParameter::StableInBuffer\` (no CVSS, zstd-safe)
- [RUSTSEC-2026-0396](https://cve.now/RUSTSEC-2026-0396.md): \`Seekable\` reads a NULL or out-of-bounds seek table (no CVSS, zstd-safe)
- [RUSTSEC-2026-0397](https://cve.now/RUSTSEC-2026-0397.md): \`OutBuffer::around\_pos\` exposes uninitialized memory (no CVSS, zstd-safe)
- [RUSTSEC-2026-0398](https://cve.now/RUSTSEC-2026-0398.md): \`Seekable::decompress\` sets a \`Vec\` length beyond its capacity for offsets past the end (no CVSS, zstd-safe)
- [RUSTSEC-2026-0399](https://cve.now/RUSTSEC-2026-0399.md): Use-after-free through \`init\_using\_cdict\` and \`init\_using\_ddict\` (no CVSS, zstd-safe)
- [RUSTSEC-2026-0400](https://cve.now/RUSTSEC-2026-0400.md): Use-after-free of a dictionary after a one-shot call on a context with an open stream (no CVSS, zstd-safe)
- [RUSTSEC-2026-0401](https://cve.now/RUSTSEC-2026-0401.md): Out-of-bounds read in \`train\_from\_buffer\` when sample sizes overflow (no CVSS, zstd-safe)
- [RUSTSEC-2026-0402](https://cve.now/RUSTSEC-2026-0402.md): Heap buffer overflow in \`CCtx::try\_clone\` on a multithreaded context (no CVSS, zstd-safe)
- [RUSTSEC-2026-0403](https://cve.now/RUSTSEC-2026-0403.md): Uninitialized memory exposed when streaming decompression of a legacy frame fails (no CVSS, zstd-safe)
- [RUSTSEC-2026-0404](https://cve.now/RUSTSEC-2026-0404.md): Double free in \`DCtx::try\_clone\` (no CVSS, zstd-safe)
- [RUSTSEC-2026-0405](https://cve.now/RUSTSEC-2026-0405.md): Out-of-bounds read with an out-of-range \`InBuffer::pos\` (no CVSS, zstd-safe)
- [RUSTSEC-2026-0406](https://cve.now/RUSTSEC-2026-0406.md): Use-after-free when changing a multithreaded context with an unfinished frame (no CVSS, zstd-safe)
- [RUSTSEC-2026-0410](https://cve.now/RUSTSEC-2026-0410.md): WebAssembly allocator shim corrupts memory on allocation failure (no CVSS, zstd-sys)
- [CVE-2026-63430](https://cve.now/CVE-2026-63430.md): ammonia: mXSS in ammonia via MathML \`annotation-xml\` encoding strip (CVSS 6.3, rust-ammonia ammonia · ammonia)
- [CVE-2026-103929](https://cve.now/CVE-2026-103929.md): mise permits untrusted local configuration to override default shell arguments (CVSS 7.8, jdx mise · mise)
- [RUSTSEC-2026-0352](https://cve.now/RUSTSEC-2026-0352.md): Filesystem sandbox escape when renaming symlinks with trailing slashes (no CVSS, wasmtime-wasi)
- [RUSTSEC-2026-0353](https://cve.now/RUSTSEC-2026-0353.md): Panic when invoking an async-lifted function via \`call\` (no CVSS, wasmtime)
- [RUSTSEC-2026-0355](https://cve.now/RUSTSEC-2026-0355.md): Panic viewing component model stream or future as the wrong type (no CVSS, wasmtime)
- [RUSTSEC-2026-0356](https://cve.now/RUSTSEC-2026-0356.md): Panic on erroneous call-to-host from guest realloc call (no CVSS, wasmtime)
- [RUSTSEC-2026-0358](https://cve.now/RUSTSEC-2026-0358.md): Yielding in a component start function can lead to a host panic (no CVSS, wasmtime)
- [RUSTSEC-2026-0363](https://cve.now/RUSTSEC-2026-0363.md): Component-model handle tables are capped only per instance and charged to no limit (no CVSS, wasmtime)
- [RUSTSEC-2026-0364](https://cve.now/RUSTSEC-2026-0364.md): Exception tags can cause host data structures to be unaligned (no CVSS, wasmtime)
- [CVE-2026-102342](https://cve.now/CVE-2026-102342.md): ammonia allows stored XSS through unsanitized SVG animate and set attributes (CVSS 5.4, rust-ammonia ammonia · ammonia)
- [GHSA-2MJX-QC3C-RQVC](https://cve.now/GHSA-2MJX-QC3C-RQVC.md): Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries (medium (no CVSS), rustls)
- [CVE-2026-104855](https://cve.now/CVE-2026-104855.md): Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state (CVSS 2.0, bytecodealliance wasmtime · wasmtime)
- [CVE-2026-104843](https://cve.now/CVE-2026-104843.md): uv: Path traversal on Windows through wheel extraction (CVSS 5.9, astral-sh uv · uv)
- [CVE-2026-104437](https://cve.now/CVE-2026-104437.md): Zebra before 4.4.0 Consensus Split via SIGHASH\_SINGLE Missing-Output Handling (CVSS 8.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-104436](https://cve.now/CVE-2026-104436.md): Zebra before 4.5.0 CPU Amplification via Uncapped getblocks/getheaders Locator Length (CVSS 6.3, ZcashFoundation zebra · ZcashFoundation zebra-chain +2)
- [CVE-2026-104435](https://cve.now/CVE-2026-104435.md): Zebra 4.4.0 Consensus Divergence via V5 SIGHASH\_SINGLE Without Output (CVSS 8.3, ZcashFoundation zebra · zebrad +1)
- [CVE-2026-104434](https://cve.now/CVE-2026-104434.md): Zebra before 8.0.0 Denial of Service via z\_listunifiedreceivers RPC (CVSS 7.1, ZcashFoundation zebra · zebra-rpc +1)
- [CVE-2026-102825](https://cve.now/CVE-2026-102825.md): Russh: Configured server auth-attempt cap is not enforced in the USERAUTH\_REQUEST runtime path (CVSS 3.7, Eugeny russh · russh)
- [CVE-2026-102824](https://cve.now/CVE-2026-102824.md): Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange (CVSS 4.3, Eugeny russh · russh)
- [CVE-2026-102823](https://cve.now/CVE-2026-102823.md): russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened (CVSS 7.5, Eugeny russh · russh)
- [CVE-2026-102822](https://cve.now/CVE-2026-102822.md): russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic (CVSS 3.7, Eugeny russh · russh)
- [CVE-2026-102821](https://cve.now/CVE-2026-102821.md): Russh: Unbounded memory exhaustion via CHANNEL\_OPEN flood during a client-stalled rekey (CVSS 6.5, Eugeny russh · russh)
- [CVE-2026-102820](https://cve.now/CVE-2026-102820.md): pageant: Out-of-bounds read / oversized allocation in \`pageant\` MemoryMap::read via a malicious Pageant agent (Windows) (CVSS 6.2, Eugeny russh · rust pageant +1)
- [CVE-2026-97875](https://cve.now/CVE-2026-97875.md): DNS rebinding vulnerability in rojo serve HTTP API (CVSS 8.1, rojo-rbx rojo · rojo)
- [CVE-2026-96889](https://cve.now/CVE-2026-96889.md): Librsvg: use-after-free when xml includes have duplicated entities (CVSS 7.8, Red Hat Enterprise Linux · librsvg)
- [RUSTSEC-2026-0394](https://cve.now/RUSTSEC-2026-0394.md): Build environment compiled into the library and readable at runtime (no CVSS, rustpython-vm)
- [CVE-2026-92612](https://cve.now/CVE-2026-92612.md): In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as (CVSS 1.0, Eclipse Foundation Eclipse iceoryx™ · iceoryx2-bb-container)
- [CVE-2026-61670](https://cve.now/CVE-2026-61670.md): microsandbox: Secret values exposed in world-readable process arguments (CVSS 6.5, superradcompany microsandbox · microsandbox)
- [CVE-2026-93657](https://cve.now/CVE-2026-93657.md): hickory-resolver before 0.26.2 DNSSEC Validation Bypass (CVSS 8.7, hickory-dns hickory-resolver · hickory-resolver)
- [CVE-2026-93602](https://cve.now/CVE-2026-93602.md): rustls-webpki before 0.103.10 CRL Revocation Check Bypass (CVSS 5.9, rustls webpki · rustls-webpki)
- [CVE-2026-93601](https://cve.now/CVE-2026-93601.md): rustls webpki 0.101.0 before 0.103.12 Name Constraint Bypass (CVSS 2.1, rustls webpki · rustls-webpki)
- [CVE-2026-93600](https://cve.now/CVE-2026-93600.md): rustls webpki Name Constraints URI Validation Bypass (CVSS 2.1, rustls webpki · rustls-webpki)
- [CVE-2026-93599](https://cve.now/CVE-2026-93599.md): rustls-webpki before 0.103.13 Panic via empty BIT STRING (CVSS 8.7, rustls webpki · rustls-webpki)
- [CVE-2026-68523](https://cve.now/CVE-2026-68523.md): Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service (CVSS 7.5, fulgur-rs fulgur · fulgur)
- [CVE-2026-68537](https://cve.now/CVE-2026-68537.md): Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service (CVSS 7.5, fulgur-rs fulgur · fulgur)
- [CVE-2026-64684](https://cve.now/CVE-2026-64684.md): RMCP: Custom HTTP headers leak to cross-origin redirect targets (CVSS 6.8, modelcontextprotocol rust-sdk · rmcp)
- [CVE-2026-63127](https://cve.now/CVE-2026-63127.md): RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery (CVSS 8.2, modelcontextprotocol rust-sdk · rmcp)
- [CVE-2026-63128](https://cve.now/CVE-2026-63128.md): RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service (CVSS 7.5, modelcontextprotocol rust-sdk · rmcp)
- [CVE-2026-61544](https://cve.now/CVE-2026-61544.md): libp2p-quic: Remote panic via certificate expiry race during QUIC handshake (CVSS 8.2, rust-libp2p · libp2p-quic)
- [CVE-2026-55093](https://cve.now/CVE-2026-55093.md): tract-nnef: integer overflow in NNEF \`.dat\` tensor parser yields an out-of-bounds read on model load (CVSS 6.1, sonos tract · tract-nnef)
- [CVE-2026-55832](https://cve.now/CVE-2026-55832.md): Tract: Arbitrary file read via unsanitized ONNX external\_data \`location\` (path traversal) on model load in tract-onnx (CVSS 6.1, sonos tract · tract-onnx)
- [CVE-2026-54541](https://cve.now/CVE-2026-54541.md): Nimiq: Panic in TrieProof::verify via child\_index unwrap on equal-length keys (CVSS 3.7, nimiq core-rs-albatross · nimiq-primitives)
- [CVE-2026-54542](https://cve.now/CVE-2026-54542.md): Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof (CVSS 3.7, nimiq core-rs-albatross · nimiq-primitives)
- [CVE-2025-24890](https://cve.now/CVE-2025-24890.md): gix-sec safe.directory protections absent for elevated administrators (CVSS 6.8, GitoxideLabs gitoxide · gix-sec)
- [CVE-2026-45056](https://cve.now/CVE-2026-45056.md): Matrix Rust SDK: Sender-binding gaps in to-device and room-key attribution (CVSS 6.9, matrix-org matrix-rust-sdk · matrix-sdk-crypto)
- [CVE-2026-45057](https://cve.now/CVE-2026-45057.md): matrix-sdk-ui: Incomplete edit validation (CVSS 4.9, matrix-org matrix-sdk-ui · matrix-sdk-ui)
- [CVE-2026-53956](https://cve.now/CVE-2026-53956.md): Rattler vulnerable to package cache path traversal via conda package build string (CVSS 5.4, conda rattler\_cache · conda py-rattler +2)
- [CVE-2026-53600](https://cve.now/CVE-2026-53600.md): async-tar PAX extension-header desync enables tar entry/content smuggling (CVSS 6.3, dignifiedquire async-tar · async-tar)
- [CVE-2026-78422](https://cve.now/CVE-2026-78422.md): zbus\_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID (CVSS 7.3, z-galaxy zbus\_polkit · zbus\_polkit)
- [CVE-2026-54788](https://cve.now/CVE-2026-54788.md): dd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS (CVSS 7.5, DataDog dd-trace-rs · datadog-opentelemetry)
- [CVE-2026-82255](https://cve.now/CVE-2026-82255.md): gitoxide 0.25.4 HTTP Credential Leak via Redirect (CVSS 7.6, GitoxideLabs gitoxide · gix-transport)
- [CVE-2026-82254](https://cve.now/CVE-2026-82254.md): gitoxide before 0.69.0 Denial of Service via gix-pack (CVSS 8.7, GitoxideLabs gitoxide · gix-pack)
- [CVE-2026-82253](https://cve.now/CVE-2026-82253.md): gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass (CVSS 8.7, GitoxideLabs gitoxide · gix +1)
- [CVE-2026-82252](https://cve.now/CVE-2026-82252.md): gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules (CVSS 8.7, GitoxideLabs gitoxide · gitoxide +1)
- [CVE-2026-82251](https://cve.now/CVE-2026-82251.md): gitoxide before 0.52.1 Path Traversal via Submodule Name (CVSS 8.7, GitoxideLabs gitoxide · gitoxide +1)
- [CVE-2026-82250](https://cve.now/CVE-2026-82250.md): gitoxide gix-packetline before 0.21.5 Denial of Service (CVSS 7.1, GitoxideLabs gitoxide · gix-packetline)
- [CVE-2026-46369](https://cve.now/CVE-2026-46369.md): Nimiq: Validity store off by one error (CVSS 7.5, nimiq core-rs-albatross · nimiq-blockchain)
- [CVE-2026-55663](https://cve.now/CVE-2026-55663.md): mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation) (CVSS 5.6, versatica mediasoup · mediasoup)
- [CVE-2026-53531](https://cve.now/CVE-2026-53531.md): ratex-parser has unbounded parser recursion that leads to stack overflow (process abort) (CVSS 6.9, erweixin RaTeX · ratex-parser)
- [CVE-2026-53530](https://cve.now/CVE-2026-53530.md): ratex-parser panics on \`\\verb\` with a multibyte delimiter (UTF-8 byte-boundary slice) (CVSS 8.7, erweixin RaTeX · ratex-parser)
- [CVE-2026-54136](https://cve.now/CVE-2026-54136.md): Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list\_search (CVSS 5.1, windmill-labs windmill · windmill-api)
- [CVE-2026-63481](https://cve.now/CVE-2026-63481.md): Hurl: Cookies in Cookies section leak when redirecting to a different host (CVSS 6.9, Orange-OpenSource hurl · hurl)
- [CVE-2026-52834](https://cve.now/CVE-2026-52834.md): jxl-oxide: Out-of-bounds writes due to integer overflow in jxl-grid on 32-bit platforms (CVSS 7.3, tirr-c jxl-oxide · tirr-c jxl-grid +1)
- [CVE-2026-76234](https://cve.now/CVE-2026-76234.md): libcrux before 0.0.6 Cryptographic Implementation Bug Fixes (CVSS 8.7, celabshq libcrux-ecdh · celabshq libcrux-ed25519 +4)
- [CVE-2026-52829](https://cve.now/CVE-2026-52829.md): ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book (CVSS 7.5, ZcashFoundation zebra · zebra-network +1)
- [CVE-2026-52736](https://cve.now/CVE-2026-52736.md): ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache (CVSS 8.7, ZcashFoundation zebra · zebra-state +1)
- [CVE-2026-52732](https://cve.now/CVE-2026-52732.md): ZEBRA: Mempool transaction admission denial via single-peer inbound queue saturation (CVSS 5.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-52731](https://cve.now/CVE-2026-52731.md): ZEBRA: Full node denial of service via non-ASCII LongPollId in getblocktemplate (CVSS 6.5, ZcashFoundation zebra · ZcashFoundation zebra-rpc +2)
- [CVE-2026-52733](https://cve.now/CVE-2026-52733.md): ZEBRA: Persistent on-disk corruption of Sapling/Orchard subtree roots after chain fork via pop\_tip (CVSS 6.5, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52738](https://cve.now/CVE-2026-52738.md): ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks (CVSS 6.9, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52735](https://cve.now/CVE-2026-52735.md): ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser (CVSS 9.3, ZcashFoundation zebra · zebra-script +1)
- [CVE-2026-52739](https://cve.now/CVE-2026-52739.md): ZEBRA: Repeated Non-Finalized Shielded Transaction Aborts Zebra Before Duplicate-Nullifier Rejection (CVSS 5.9, ZcashFoundation zebra · ZcashFoundation zebra-state +2)
- [CVE-2026-52734](https://cve.now/CVE-2026-52734.md): ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel\_handles retention (CVSS 5.3, ZcashFoundation zebra · zebrad)
- [CVE-2026-52737](https://cve.now/CVE-2026-52737.md): ZEBRA: Sync restart poisoning from single unauthenticated peer via above-lookahead block (CVSS 5.3, ZcashFoundation zebra · ZcashFoundation zebra-consensus +2)
- [CVE-2026-75915](https://cve.now/CVE-2026-75915.md): CodeWhale before 0.8.64 Environment Variable Leak via js\_execution (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75914](https://cve.now/CVE-2026-75914.md): CodeWhale before 0.8.64 Path Traversal via image\_analyze symlink (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75913](https://cve.now/CVE-2026-75913.md): CodeWhale before 0.8.64 Argument Injection via git\_show (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75912](https://cve.now/CVE-2026-75912.md): CodeWhale before 0.8.64 Argument Injection via git\_blame (CVSS 8.3, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75911](https://cve.now/CVE-2026-75911.md): CodeWhale before 0.8.64 Remote Code Execution via allow\_shell (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75859](https://cve.now/CVE-2026-75859.md): CodeWhale before 0.8.64 Arbitrary File Read via instructions (CVSS 8.7, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75858](https://cve.now/CVE-2026-75858.md): CodeWhale rlm\_eval before 0.8.64 Remote Code Execution (CVSS 8.5, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75857](https://cve.now/CVE-2026-75857.md): CodeWhale before 0.8.64 Privilege Escalation via exec\_shell\_interact (CVSS 7.3, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-75856](https://cve.now/CVE-2026-75856.md): CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU (CVSS 9.2, Hmbown CodeWhale · deepseek-tui +2)
- [CVE-2026-73051](https://cve.now/CVE-2026-73051.md): actix-http before 3.12.1 HTTP Request Smuggling via CL.TE (CVSS 6.3, actix-http)
- [CVE-2026-72814](https://cve.now/CVE-2026-72814.md): actix-files before 0.6.10 Information Disclosure via Files (CVSS 6.3, actix-files)
- [CVE-2026-72813](https://cve.now/CVE-2026-72813.md): actix-files before 0.6.10 Denial of Service via empty Range header (CVSS 6.9, actix-files)
- [CVE-2026-73489](https://cve.now/CVE-2026-73489.md): Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records (CVSS 4.3, Eugeny russh · russh)
- [CVE-2026-73430](https://cve.now/CVE-2026-73430.md): Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode\_mpint OOB) (CVSS 5.3, Eugeny russh · russh)
- [CVE-2026-73429](https://cve.now/CVE-2026-73429.md): Russh: client wrong-length X25519 \`clone\_from\_slice\` panic (pre-auth DoS) (CVSS 5.3, Eugeny russh · russh)
- [CVE-2026-72925](https://cve.now/CVE-2026-72925.md): SWC HTML minifier may allow script element breakout when minifying embedded JSON (CVSS 6.1, swc-project swc · @swc html +3)
- [CVE-2026-68930](https://cve.now/CVE-2026-68930.md): Russh: Channel-scoped server callbacks can be reached without an open channel (CVSS 6.5, Eugeny russh · russh)
- [CVE-2026-18140](https://cve.now/CVE-2026-18140.md): Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers (CVSS 7.5, aws-smithy-json)
- [CVE-2026-25800](https://cve.now/CVE-2026-25800.md): quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly (CVSS 7.5, quinn-rs quinn · quinn-proto)
- [CVE-2026-16756](https://cve.now/CVE-2026-16756.md): Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service (CVSS 7.5, aws-smithy-http-server)
- [CVE-2026-47425](https://cve.now/CVE-2026-47425.md): Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write) (CVSS 6.9, conda rattler · conda py-rattler +4)
- [CVE-2026-47144](https://cve.now/CVE-2026-47144.md): Shamefile has an arbitrary file read via shamefile.yaml in shame next (CVSS 5.5, BKDDFS shamefile · shamefile)
- [CVE-2026-47128](https://cve.now/CVE-2026-47128.md): nono: Sandbox escape on Linux via D-Bus: \`systemd-run --user\` (CVSS 6.1, always-further nono · nono-cli)
- [CVE-2026-46671](https://cve.now/CVE-2026-46671.md): Rust OneNote File Parser: Path traversal in \`Parser::parse\_notebook\` allows reading files outside the notebook directory (CVSS 4.4, msiemens onenote.rs · onenote\_parser)
- [CVE-2026-46428](https://cve.now/CVE-2026-46428.md): lettre has TLS hostname verification disabled when using Boring TLS backend (CVSS 9.1, lettre)
- [CVE-2026-63763](https://cve.now/CVE-2026-63763.md): SurrealDB before 2.5.0 Privilege Escalation via Future Fields (CVSS 7.5, surrealdb)
- [CVE-2026-63762](https://cve.now/CVE-2026-63762.md): SurrealDB before v2.6.1 Denial of Service via scripting (CVSS 6.0, surrealdb)
- [CVE-2026-63761](https://cve.now/CVE-2026-63761.md): SurrealDB before 3.1.0 Algorithm Downgrade via ES512 (CVSS 5.3, surrealdb)
- [CVE-2026-63760](https://cve.now/CVE-2026-63760.md): SurrealDB before 3.1.0 Denial of Service via JSON Parser (CVSS 8.7, surrealdb)
- [CVE-2026-63758](https://cve.now/CVE-2026-63758.md): SurrealDB before 3.1.0 Authorization Bypass via KILL Statement (CVSS 5.3, surrealdb)
- [CVE-2026-63755](https://cve.now/CVE-2026-63755.md): SurrealDB before 3.1.0 Permission Bypass via WHERE Clause (CVSS 7.1, surrealdb)
- [CVE-2026-63751](https://cve.now/CVE-2026-63751.md): SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch (CVSS 5.3, surrealdb)
- [CVE-2026-63748](https://cve.now/CVE-2026-63748.md): SurrealDB before 3.1.0 Information Disclosure via Error Messages (CVSS 5.3, surrealdb)
- [CVE-2026-63746](https://cve.now/CVE-2026-63746.md): SurrealDB before 3.1.0 Permission Bypass via Graph Traversal (CVSS 7.1, surrealdb)
- [CVE-2026-63743](https://cve.now/CVE-2026-63743.md): SurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP Redirect (CVSS 5.3, surrealdb)
- [CVE-2026-63740](https://cve.now/CVE-2026-63740.md): SurrealDB before 3.1.4 Array Element Permission Bypass (CVSS 7.1, surrealdb)
- [CVE-2026-63738](https://cve.now/CVE-2026-63738.md): SurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via Traversal (CVSS 5.3, surrealdb)
- [CVE-2026-63735](https://cve.now/CVE-2026-63735.md): SurrealDB before 3.2.0 Authentication Bypass via Custom API (CVSS 8.6, surrealdb)
- [CVE-2026-63733](https://cve.now/CVE-2026-63733.md): SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause (CVSS 5.3, surrealdb · surrealdb-core)
- [CVE-2025-71398](https://cve.now/CVE-2025-71398.md): SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass (CVSS 5.8, surrealdb)
- [CVE-2025-71397](https://cve.now/CVE-2025-71397.md): SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops (CVSS 7.1, surrealdb)
- [CVE-2025-71396](https://cve.now/CVE-2025-71396.md): SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting (CVSS 2.3, surrealdb)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/ecosystem/crates.io
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.