Search results

RUSTSEC-2026-0067: unpack_in can chmod arbitrary directories by following symlinks

Status: Open.

#3765 In autonomys/subspace;

· github-actions opened on Mar 29, 2026

RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero

Status: Open.

#3764 In autonomys/subspace;

· github-actions opened on Mar 29, 2026

Security

Status: Open.

#3762 In autonomys/subspace;

· LewisHashlock opened on Mar 25, 2026

RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

Status: Open.

#3760 In autonomys/subspace;

· github-actions opened on Mar 22, 2026

RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

Status: Open.

#3761 In autonomys/subspace;

· github-actions opened on Mar 22, 2026

RUSTSEC-2026-0037: Denial of service in Quinn endpoints

Status: Open.

#3755 In autonomys/subspace;

· github-actions opened on Mar 15, 2026

RUSTSEC-2026-0020: Guest-controlled resource exhaustion in WASI implementations

Status: Open.

#3751 In autonomys/subspace;

· github-actions opened on Mar 1, 2026

RUSTSEC-2026-0021: Panic adding excessive fields to a wasi:http/types.fields instance

Status: Open.

#3750 In autonomys/subspace;

· github-actions opened on Mar 1, 2026

RUSTSEC-2026-0012: Unsoundness in opt-in ARMv8 assembly backend for keccak

Status: Open.

#3748 In autonomys/subspace;

· github-actions opened on Feb 22, 2026

RUSTSEC-2026-0007: Integer overflow in BytesMut::reserve

Status: Open.

#3746 In autonomys/subspace;

· github-actions opened on Feb 8, 2026

RUSTSEC-2026-0009: Denial of Service via Stack Exhaustion

Status: Open.

#3747 In autonomys/subspace;

· github-actions opened on Feb 8, 2026

RUSTSEC-2026-0002: IterMut violates Stacked Borrows by invalidating internal pointer

Status: Open.

#3739 In autonomys/subspace;

· github-actions opened on Jan 11, 2026