rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2026-07-22 01:06:54 -04:00
Code Issues Packages Projects Releases Wiki Activity
3,012 Commits 30 Branches 0 Tags
fac01b6e2381bf2467d75e33e207ca892e5329a3
Commit Graph

3012 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Maarten de Vries
fac01b6e23 Add unsound pointer arithmetic advisory for memmap2. (#2990) 2026-06-22 11:10:49 -07:00
Dirkjan Ochtman
4d2f42a56d quinn-proto: remote memory exhaustion 2026-06-22 11:07:29 -07:00
djc
e3c23aa97a Assigned RUSTSEC-2022-0104 to structopt 2026-06-22 11:22:04 +02:00
Kyle J Strand
b7a1ea40b3 Add advisory for structopt: unmaintained (really in "maintenance mode", migration to clap recommended) (#2983) 2026-06-22 11:13:09 +02:00
Daniel Scherzer
776615bd36 CVE-2019-16760.md: update gist link 2026-06-18 13:58:33 +02:00
djc
aa90516a25 Assigned RUSTSEC-2026-0184 to git2 2026-06-17 15:50:20 +02:00
Daniel Scherzer
7a4fdf9c1b Update git2 advisory for release of 0.21.0 2026-06-17 15:46:02 +02:00
Daniel Scherzer
d7297edbd6 Add advisory for git2: buffer-created BlameHunk leads to null pointers 2026-06-17 15:46:02 +02:00
djc
089720f90c Assigned RUSTSEC-2026-0183 to git2 2026-06-17 14:56:48 +02:00
Daniel Scherzer
1916f9e32d Update git2 advisory for release of 0.21.0 2026-06-17 14:55:34 +02:00
Daniel Scherzer
ea1790f470 Add advisory for git2: Remote::list() with an empty list triggers UB 2026-06-17 14:55:34 +02:00
LawnGnome
74e084413d Assigned RUSTSEC-2026-0182 to wasmtime-wasi 2026-06-15 16:29:39 -07:00
Alex Crichton
ceaef4a2aa Add a new Wasmtime advisory 
Mirroring
https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-3p27-qvp9-27qf
to here.
 2026-06-15 15:18:21 -07:00
dependabot[bot]
c01141b509 Bump actions/checkout from 6.0.2 to 6.0.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](de0fac2e45...df4cb1c069)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-15 15:16:02 -07:00
djc
09735e1274 Assigned RUSTSEC-2026-0181 to vibeio-http 2026-06-13 10:34:52 +02:00
Dorian Niemiec
787924e599 chore: add security advisory for vibeio-http chunked encoding DoS 2026-06-13 09:08:39 +02:00
djc
234a41a155 Synchronize IDs (2026-06-13) 2026-06-13 08:16:34 +02:00
djc
27ca15f7db Assigned RUSTSEC-2026-0178 to tokio-postgres, RUSTSEC-2026-0179 to postgres-protocol, RUSTSEC-2026-0180 to postgres-protocol 2026-06-12 19:27:58 +02:00
Paolo Barbolini
e43228936a Add advisories for rust-postgres DoS issues (postgres-protocol, tokio-postgres) 
Three denial-of-service issues triggered by a malicious, compromised, or
man-in-the-middle PostgreSQL server, all fixed and released:

- postgres-protocol: unbounded SCRAM PBKDF2 iteration count (CPU exhaustion,
  pins a tokio worker thread), fixed in 0.6.12
- postgres-protocol: panic decoding a malformed hstore value, fixed in 0.6.12
- tokio-postgres: panic on a DataRow with fewer fields than columns, fixed in 0.7.18
 2026-06-12 19:02:07 +02:00
LawnGnome
7aa81cbb51 Assigned RUSTSEC-2026-0177 to pyo3 2026-06-11 17:21:36 -07:00
David Hewitt
f1a5907888 report thread safety issue with PyO3's PyCFunction::new_closure 2026-06-11 15:45:57 -07:00
David Hewitt
343f397d14 add upper bounds to (patched) affected functions in PyO3 nth_back report 2026-06-11 15:44:55 -07:00
djc
ad0ae0d922 Assigned RUSTSEC-2026-0176 to pyo3 2026-06-11 23:22:54 +02:00
David Hewitt
124b56dd55 report memory exposure in PyO3 nth_back iterator methods 2026-06-11 23:21:31 +02:00
djc
254ee9eb7b Assigned RUSTSEC-2021-0156 to triton-vm 2026-06-11 13:35:08 +02:00
Jan Ferdinand Sauer
f05e2e18bf Add advisory for triton-vm 2026-06-11 13:28:24 +02:00
djc
141af10375 Assigned RUSTSEC-2026-0175 to onering 2026-06-10 21:02:16 +02:00
Adam Harvey
555af38143 Add malware advisory for onering 1.4.1 (#2953) 2026-06-10 21:00:31 +02:00
djc
02c8054e58 Synchronize IDs (2026-06-10) 2026-06-10 08:13:29 +02:00
djc
a406e06cdd Assigned RUSTSEC-2026-0174 to http-types 2026-06-08 18:24:35 +02:00
Clover
fc7c78161c Add advisory for http-types: violated ASCII invariants (#2923) 2026-06-08 18:17:25 +02:00
djc
4c5e594f0f Assigned RUSTSEC-2026-0173 to proc-macro-error2 2026-06-07 22:48:51 +02:00
Sander Saares
dfd3306e15 Add unmaintained advisory for proc-macro-error2 
The crate owner has confirmed proc-macro-error2 is no longer maintained

in https://github.com/GnomedDev/proc-macro-error-2/issues/17.

Also removes proc-macro-error2 from the list of suggested alternatives in

the existing proc-macro-error advisory (RUSTSEC-2024-0370).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-06-07 21:54:51 +02:00
djc
8fe151aab7 Assigned RUSTSEC-2025-0163 to trailer 2026-06-06 16:44:53 +02:00
Alexander Kjäll
b3022976de trailer: add information about CVE-2025-47737 2026-06-06 16:44:05 +02:00
djc
a8ac7f20fb Assigned RUSTSEC-2026-0172 to diesel 2026-06-05 10:35:31 +02:00
Georg Semmler
451cb2e231 Another Diesel Advisory 
This fills another advisory for another Diesel issue recently uncovered
by LLM/AI.
 2026-06-05 10:12:31 +02:00
djc
14f08b6b8d Assigned RUSTSEC-2026-0171 to logflux 2026-06-04 21:46:31 +02:00
Adam Harvey
3172636eed Add malware advisory for logflux. 2026-06-04 21:40:21 +02:00
LawnGnome
162f4c6f3d Assigned RUSTSEC-2026-0169 to surf, RUSTSEC-2026-0170 to tide 2026-06-04 12:11:08 -07:00
Dirkjan Ochtman
08ca25780d Mark surf and tide as unmaintained 2026-06-04 12:09:57 -07:00
djc
65bd68bcde Assigned RUSTSEC-2026-0160 to pqcrypto-sphincsplus, RUSTSEC-2026-0161 to pqcrypto-mlkem, RUSTSEC-2026-0162 to pqcrypto-traits, RUSTSEC-2026-0163 to pqcrypto-internals, RUSTSEC-2026-0164 to pqcrypto, RUSTSEC-2026-0165 to pqcrypto-falcon and 3 more 2026-06-04 16:53:59 +02:00
Thom Wiggers
5848fe0b16 Mark pqcrypto crates as unmaintained 2026-06-04 16:51:48 +02:00
djc
8083c83e0b Assigned RUSTSEC-2026-0159 to matrix-sdk-crypto 2026-06-04 14:02:36 +02:00
Damir Jelić
1202966754 Add CVE-2026-45056 for matrix-sdk-crypto 2026-06-04 14:01:37 +02:00
djc
a82c97b7b5 Assigned RUSTSEC-2026-0158 to matrix-sdk-ui 2026-06-04 13:56:29 +02:00
Damir Jelić
b208ebc457 Add CVE-2026-45057 for matrix-sdk-ui 2026-06-04 13:55:20 +02:00
djc
cf9c07022f Assigned RUSTSEC-2026-0156 to metacall, RUSTSEC-2026-0157 to metacall 2026-06-03 12:42:03 +02:00
Thanasis Trispiotis
5fab8dfc1b add advisories for metacall 2026-06-03 12:40:48 +02:00
djc
98c2ab6d44 Assigned RUSTSEC-2026-0155 to exploration 2026-06-03 10:48:05 +02:00