# crates.io Advisories.

Every crates.io Advisory we hold (Rust), newest first.

## Records, newest first

- [\`astral-tokio-tar\` is unmaintained](https://agentprime.io/advisories/RUSTSEC-2026-0440.md)
  `RUSTSEC-2026-0440` · crates.io `astral-tokio-tar`: affected `>=0.0.0-0`, no fixed version yet · No CVSS score · Not analysed yet · Published 3 Nov 2026
- [Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads](https://agentprime.io/advisories/GHSA-gqmm-qrjq-4c7h.md)
  `GHSA-gqmm-qrjq-4c7h`, `CVE-2026-111959`, `RUSTSEC-2026-0442` · crates.io `arrow-data`: affected `>=33.0.0, <57.3.2 || >=58.0.0, <58.4.1 || >=59.0.0, <59.3.2 || >=60.0.0, <60.1.0`, fixed in `57.3.2`, `58.4.1`, `59.3.2`, `60.1.0` · No CVSS score · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption, CWE-20
- [Unbounded memory allocation in \`evtx\` parsing a \`.wevtcache\` file](https://agentprime.io/advisories/RUSTSEC-2026-0431.md)
  `RUSTSEC-2026-0431` · crates.io `evtx`: affected `>=0.11.0, <0.15.1`, fixed in `0.15.1` · CVSS 5.5 Medium · Not analysed yet · Published 1 Nov 2026
- [Path traversal in \`rio-vt\` Kitty graphics protocol handler allows out-of-bounds file delete (and read)](https://agentprime.io/advisories/RUSTSEC-2026-0430.md)
  `RUSTSEC-2026-0430` · crates.io `rio-vt`: affected `>=0.0.0-0, <0.5.29`, fixed in `0.5.29` · CVSS 4.7 Medium · Not analysed yet · Published 1 Nov 2026
- [\`ant-releases\`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)](https://agentprime.io/advisories/RUSTSEC-2026-0434.md)
  `RUSTSEC-2026-0434` · crates.io `ant-releases`: affected `>=0.0.0-0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 31 Oct 2026
- [\`codeq\`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)](https://agentprime.io/advisories/RUSTSEC-2026-0432.md)
  `RUSTSEC-2026-0432` · crates.io `codeq`: affected `>=0.0.0-0, <0.6.3`, fixed in `0.6.3` · CVSS 5.3 Medium · Not analysed yet · Published 31 Oct 2026
- [russh: Agent server never calls \`Agent::confirm\`, so keys added with the confirm constraint (\`ssh-add -c\`) sign without confirmation](https://agentprime.io/advisories/GHSA-vp5q-ff62-jwqv.md)
  `GHSA-vp5q-ff62-jwqv`, `CVE-2026-116794` · crates.io `russh`: affected `<0.65`, fixed in `0.65` · CVSS 8.3 High · Not analysed yet · Published 30 Oct 2026 · Tags: Broken access control
- [pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)](https://agentprime.io/advisories/GHSA-662x-8wvj-2276.md)
  `GHSA-662x-8wvj-2276`, `CVE-2026-116775` · crates.io `pageant`: affected `>=0.2.0, <0.2.5`, fixed in `0.2.5` · CVSS 2.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)](https://agentprime.io/advisories/GHSA-fw5c-8223-6h42.md)
  `GHSA-fw5c-8223-6h42`, `CVE-2026-116774` · crates.io `russh`: affected `>=0.60.0, <0.65`, fixed in `0.65` · CVSS 4.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages](https://agentprime.io/advisories/GHSA-9wfm-jcj8-jfv9.md)
  `GHSA-9wfm-jcj8-jfv9`, `CVE-2026-116696` · crates.io `russh`: affected `<0.65.0`, fixed in `0.65.0` · CVSS 3.3 Low · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets](https://agentprime.io/advisories/GHSA-4p9f-7p9m-5vfg.md)
  `GHSA-4p9f-7p9m-5vfg`, `CVE-2026-116773` · crates.io `russh`: affected `<0.65`, fixed in `0.65` · CVSS 4.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Denial of service
- [\`nix-nar\`: \`Decoder::unpack\` writes archive entries outside the destination directory (path traversal)](https://agentprime.io/advisories/RUSTSEC-2026-0425.md)
  `RUSTSEC-2026-0425` · crates.io `nix-nar`: affected `>=0.0.0-0, <0.6.0`, fixed in `0.6.0` · CVSS 7.5 High · Not analysed yet · Published 30 Oct 2026
- [BLAKE2b produces wrong tag when using \`reset()\` with a different-length key](https://agentprime.io/advisories/GHSA-xcc6-f2jq-43x6.md)
  `GHSA-xcc6-f2jq-43x6`, `RUSTSEC-2026-0428` · crates.io `orion`: affected `>=0.0.0-0, <0.17.16 || >=0.18.0-0, <0.18.1`, fixed in `0.17.16`, `0.18.1` · No CVSS score · Not analysed yet · Published 30 Oct 2026
- [LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time](https://agentprime.io/advisories/GHSA-r7wm-4vf2-h44w.md)
  `GHSA-r7wm-4vf2-h44w`, `RUSTSEC-2026-0426` · crates.io `orion`: affected `>=0.0.0-0, <0.17.16 || >=0.18.0-0, <0.18.1`, fixed in `0.17.16`, `0.18.1` · No CVSS score · Not analysed yet · Published 30 Oct 2026
- [zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size](https://agentprime.io/advisories/GHSA-9hj8-73fh-9963.md)
  `GHSA-9hj8-73fh-9963`, `CVE-2026-115907` · crates.io `zip`: affected `>=5.1.0, <9.0.0`, fixed in `9.0.0` · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service
- [zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.](https://agentprime.io/advisories/GHSA-hjqx-j4rw-g7xv.md)
  `GHSA-hjqx-j4rw-g7xv`, `CVE-2026-115908` · crates.io `zip`: affected `>=7.2.0, <9.0.0`, fixed in `9.0.0` · CVSS 7.4 High · Not analysed yet · Published 29 Oct 2026 · Tags: Path traversal, CWE-61
- [zip: AES Entry HMAC Authentication Bypass on Premature EOF](https://agentprime.io/advisories/GHSA-8hxf-qr8p-62x4.md)
  `GHSA-8hxf-qr8p-62x4`, `CVE-2026-115906` · crates.io `zip`: affected `>=0.6.0, <9.0.0`, fixed in `9.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-354, CWE-1284
- [zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction](https://agentprime.io/advisories/GHSA-q7v9-x93c-xqv3.md)
  `GHSA-q7v9-x93c-xqv3`, `CVE-2026-115909`, `RUSTSEC-2026-0429` · crates.io `zip`: affected `>=1.3.0, <9.0.0`, fixed in `9.0.0` · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2026 · Tags: Denial of service
- [Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence](https://agentprime.io/advisories/GHSA-c33x-vcv4-vg3g.md)
  `GHSA-c33x-vcv4-vg3g` · crates.io `cedar-policy` and 1 more: affected `>=3.0.0, <3.4.3 || >=4.0.0, <4.11.1`, fixed in `3.4.3`, `4.11.1` · CVSS 4.0, no score published · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-20
- [\`sn-releases\`: \`extract_release_archive\` writes archive entries without a path-traversal check (zip-slip)](https://agentprime.io/advisories/RUSTSEC-2026-0427.md)
  `RUSTSEC-2026-0427` · crates.io `sn-releases`: affected `>=0.0.0-0`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2026
- [Cross-engine type confusion with host-created struct-types-with-supertypes](https://agentprime.io/advisories/GHSA-qw58-7h65-crq2.md)
  `GHSA-qw58-7h65-crq2`, `RUSTSEC-2026-0423` · crates.io `wasmtime`: affected `>=47.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1`, fixed in `48.0.8`, `49.0.5`, `50.0.1` · No CVSS score · Not analysed yet · Published 29 Oct 2026
- [wasip3 UDP \`send\` can deliver a datagram to an address only allowed for receiving](https://agentprime.io/advisories/GHSA-hmmr-87qq-258j.md)
  `GHSA-hmmr-87qq-258j`, `RUSTSEC-2026-0420` · crates.io `wasmtime-wasi`: affected `>=48.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1`, fixed in `48.0.8`, `49.0.5`, `50.0.1` · CVSS 6.4 Medium · Not analysed yet · Published 29 Oct 2026
- [wasi-http p2: outgoing content-length can be invalid or not match body](https://agentprime.io/advisories/GHSA-h4wp-g4x3-7398.md)
  `GHSA-h4wp-g4x3-7398`, `RUSTSEC-2026-0421` · crates.io `wasmtime-wasi-http`: affected `>=0.0.0-0, <36.0.20 || >=37.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1`, fixed in `36.0.20`, `48.0.8`, `49.0.5`, `50.0.1` · CVSS 3.7 Low · Not analysed yet · Published 29 Oct 2026
- [Unbounded memory use on large request bodies](https://agentprime.io/advisories/GHSA-fj3h-2jc3-973v.md)
  `GHSA-fj3h-2jc3-973v`, `RUSTSEC-2026-0419` · crates.io `juniper_warp`: affected `>=0.0.0-0, <0.9.1`, fixed in `0.9.1` · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2026
- [Unchecked memory usage in transferring borrowed resources between components](https://agentprime.io/advisories/GHSA-6fr9-xmw9-5352.md)
  `GHSA-6fr9-xmw9-5352`, `RUSTSEC-2026-0424` · crates.io `wasmtime`: affected `>=0.0.0-0, <36.0.20 || >=37.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1`, fixed in `36.0.20`, `48.0.8`, `49.0.5`, `50.0.1` · No CVSS score · Not analysed yet · Published 29 Oct 2026
- [Typed functions with \`i31\` or \`nullref\` arguments may panic due to insufficient type-check](https://agentprime.io/advisories/GHSA-3982-jqvv-277m.md)
  `GHSA-3982-jqvv-277m`, `RUSTSEC-2026-0422` · crates.io `wasmtime`: affected `>=47.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1`, fixed in `48.0.8`, `49.0.5`, `50.0.1` · CVSS 1.8 Low · Not analysed yet · Published 29 Oct 2026
- [Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm \`br_table\` instruction](https://agentprime.io/advisories/GHSA-mghf-wjfp-p5xm.md)
  `GHSA-mghf-wjfp-p5xm`, `CVE-2026-115893`, `RUSTSEC-2026-0379` · crates.io `wasmtime`: affected `<36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `36.0.19`, `48.0.7`, `49.0.4` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-691
- [zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE](https://agentprime.io/advisories/GHSA-m665-v7pm-7grj.md)
  `GHSA-m665-v7pm-7grj`, `CVE-2026-115905` · crates.io `zip`: affected `<9.0.5`, fixed in `9.0.5` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-20, CWE-436
- [Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input](https://agentprime.io/advisories/RUSTSEC-2026-0436.md)
  `RUSTSEC-2026-0436` · crates.io `calamine`: affected `>=0.0.0-0, <0.38.0`, fixed in `0.38.0` · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026
- [Quadratic parsing of nested image wikilinks with \`ENABLE_WIKILINKS\`](https://agentprime.io/advisories/RUSTSEC-2026-0433.md)
  `RUSTSEC-2026-0433` · crates.io `pulldown-cmark`: affected `>=0.13.0, <0.13.6`, fixed in `0.13.6` · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026
- [Unbounded memory use on large request bodies](https://agentprime.io/advisories/GHSA-pfrg-qg4f-grmv.md)
  `GHSA-pfrg-qg4f-grmv`, `RUSTSEC-2026-0415` · crates.io `juniper_hyper`: affected `>=0.0.0-0, <0.10.1`, fixed in `0.10.1` · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026
- [libz-sys build script leaks environment variables in the build directory](https://agentprime.io/advisories/GHSA-8p3x-q3q3-q3v5.md)
  `GHSA-8p3x-q3q3-q3v5`, `RUSTSEC-2026-0418` · crates.io `libz-sys`: affected `>=1.0.21, <1.1.31`, fixed in `1.1.31` · No CVSS score · Not analysed yet · Published 28 Oct 2026
- [Excessive CPU and memory use on crafted GraphQL documents](https://agentprime.io/advisories/GHSA-36rq-8957-mjrx.md)
  `GHSA-36rq-8957-mjrx`, `RUSTSEC-2026-0417` · crates.io `juniper`: affected `>=0.0.0-0, <0.17.2`, fixed in `0.17.2` · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026
- [Stack overflow on deeply nested GraphQL documents](https://agentprime.io/advisories/GHSA-34cw-x8g7-rcv5.md)
  `GHSA-34cw-x8g7-rcv5`, `RUSTSEC-2026-0416` · crates.io `juniper`: affected `>=0.0.0-0, <0.17.2`, fixed in `0.17.2` · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026
- [rustls: ECH rejection can expose buffered application data to authenticated outer server before \`ech_required\` alert](https://agentprime.io/advisories/GHSA-vp88-798v-h67f.md)
  `GHSA-vp88-798v-h67f`, `RUSTSEC-2026-0347` · crates.io `rustls`: affected `>=0.23.44, <0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2`, fixed in `0.23.46`, `0.24.0-dev.2` · CVSS 2.3 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Information disclosure
- [rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share](https://agentprime.io/advisories/GHSA-w44r-93j7-qv28.md)
  `GHSA-w44r-93j7-qv28`, `RUSTSEC-2026-0349` · crates.io `rustls`: affected `<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2`, fixed in `0.23.46`, `0.24.0-dev.2` · CVSS 3.7 Low · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-757
- [Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs](https://agentprime.io/advisories/GHSA-c8m5-c952-6cm4.md)
  `GHSA-c8m5-c952-6cm4`, `RUSTSEC-2026-0346` · crates.io `rustls`: affected `<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2`, fixed in `0.23.46`, `0.24.0-dev.2` · CVSS 4.0 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-212
- [Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.](https://agentprime.io/advisories/GHSA-h2v8-394m-p7vv.md)
  `GHSA-h2v8-394m-p7vv`, `RUSTSEC-2026-0348` · crates.io `rustls`: affected `<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2`, fixed in `0.23.46`, `0.24.0-dev.2` · CVSS 3.7 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Denial of service
- [Arbitrary code execution when rerunning tests from a portable recording](https://agentprime.io/advisories/GHSA-vc25-qg58-w57c.md)
  `GHSA-vc25-qg58-w57c`, `RUSTSEC-2026-0412` · crates.io `cargo-nextest`: affected `>=0.9.125, <0.9.150`, fixed in `0.9.150` · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026
- [Use-after-free of caller-owned server name in client connection constructors](https://agentprime.io/advisories/GHSA-rc3f-4j82-cmrg.md)
  `GHSA-rc3f-4j82-cmrg`, `RUSTSEC-2026-0413` · crates.io `rustls-ffi`: affected `>=0.12.0, <0.15.7`, fixed in `0.15.7` · No CVSS score · Not analysed yet · Published 26 Oct 2026
- [Use-after-free from a comparator that answers inconsistently](https://agentprime.io/advisories/GHSA-cc53-p78w-23w9.md)
  `GHSA-cc53-p78w-23w9`, `RUSTSEC-2026-0409` · crates.io `skiplist`: affected `>=0.0.0-0, <1.3.0`, fixed in `1.3.0` · CVSS 4.0, no score published · Not analysed yet · Published 24 Oct 2026
- [Aliasing violations in splice, mutable iteration and cursors](https://agentprime.io/advisories/GHSA-924w-mwc9-86m8.md)
  `GHSA-924w-mwc9-86m8`, `RUSTSEC-2026-0408` · crates.io `skiplist`: affected `>=0.0.0-0, <1.3.0`, fixed in `1.3.0` · CVSS 4.0, no score published · Not analysed yet · Published 24 Oct 2026
- [Fallow: A \`.\*\` glob segment let an analyzed repository make Fallow test paths in the parent of the project root](https://agentprime.io/advisories/GHSA-h4fr-cmh5-qr62.md)
  `GHSA-h4fr-cmh5-qr62` · crates.io `fallow-cli` and 4 more: affected `<3.34.0`, fixed in `3.34.0` · CVSS 3.3 Low · Not analysed yet · Published 23 Oct 2026 · Tags: Path traversal
- [Fallow: Jest and Vitest \`projects\` entries let an analyzed repository make Fallow read files outside the project root](https://agentprime.io/advisories/GHSA-jfwm-3p3c-6hx5.md)
  `GHSA-jfwm-3p3c-6hx5`, `CVE-2026-115569` · crates.io `fallow-cli` and 3 more: affected `>=2.68.0, <3.34.0`, fixed in `3.34.0` · CVSS 3.3 Low · Not analysed yet · Published 23 Oct 2026 · Tags: Path traversal
- [gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()](https://agentprime.io/advisories/GHSA-q54r-jf2p-rfr2.md)
  `GHSA-q54r-jf2p-rfr2` · crates.io `gix`: affected `>=0.88.0, <0.90.0`, fixed in `0.90.0` · CVSS 7.3 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-349
- [Multiple timing variability issues in operations intended to be constant-time](https://agentprime.io/advisories/RUSTSEC-2026-0387.md)
  `RUSTSEC-2026-0387` · crates.io `crypto-bigint`: affected `>=0.0.0-0, <0.7.6`, fixed in `0.7.6` · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [Non-constant-time mask generation and \`u128\` comparisons](https://agentprime.io/advisories/RUSTSEC-2026-0385.md)
  `RUSTSEC-2026-0385` · crates.io `ctutils`: affected `>=0.0.0-0, <0.4.4`, fixed in `0.4.4` · No CVSS score · Not analysed yet · Published 23 Oct 2026
- [ammonia: mXSS via MathML \`annotation-xml\` encoding strip](https://agentprime.io/advisories/GHSA-9jh8-v38h-cvhr.md)
  `GHSA-9jh8-v38h-cvhr`, `CVE-2026-63430`, `RUSTSEC-2026-0193` · crates.io `ammonia`: affected `<3.3.2 || >=4.0.0, <4.0.2 || >=4.1.0, <4.1.3`, fixed in `3.3.2`, `4.0.2`, `4.1.3` · CVSS 6.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Out-of-bounds read in \`Log2Cache::nlog2n()\`, \`nlog2n_difference()\` and \`plog2p()\`](https://agentprime.io/advisories/RUSTSEC-2026-0411.md)
  `RUSTSEC-2026-0411` · crates.io `dahl-salso`: affected `>=0.0.0-0, <0.7.0`, fixed in `0.7.0` · No CVSS score · Not analysed yet · Published 22 Oct 2026
- [SSRF and local file disclosure via unvalidated URLs](https://agentprime.io/advisories/GHSA-23hp-j76v-pcwj.md)
  `GHSA-23hp-j76v-pcwj`, `RUSTSEC-2026-0407` · crates.io `webpage`: affected `>=0.0.0-0, <2.1.0`, fixed in `2.1.0` · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2026
- [Slack Morphism verifier errors disclose valid HMACs in the logs](https://agentprime.io/advisories/GHSA-26w4-8w32-4x3v.md)
  `GHSA-26w4-8w32-4x3v`, `CVE-2026-113799` · crates.io `slack-morphism`: affected `>=1.0.0, <2.28.0`, fixed in `2.28.0` · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Information disclosure
- [Race condition in \`tokio::time::Interval\` on Tokio v1.54.0](https://agentprime.io/advisories/GHSA-5wjr-9356-4wc8.md)
  `GHSA-5wjr-9356-4wc8`, `CVE-2026-115567`, `RUSTSEC-2026-0384` · crates.io `tokio`: affected `>=1.54.0, <1.54.1`, fixed in `1.54.1` · CVSS 5.8 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Race condition
- [Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments](https://agentprime.io/advisories/GHSA-vx4q-2c55-cvmg.md)
  `GHSA-vx4q-2c55-cvmg`, `CVE-2026-105299`, `RUSTSEC-2026-0390` · crates.io `pingora-proxy`: affected `>=0.0.0-0, <0.9.0`, fixed in `0.9.0` · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: HTTP request smuggling
- [Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass](https://agentprime.io/advisories/GHSA-mgg9-6xw2-jfgp.md)
  `GHSA-mgg9-6xw2-jfgp`, `CVE-2026-105298`, `RUSTSEC-2026-0388` · crates.io `pingora-core`: affected `>=0.0.0-0, <0.9.0`, fixed in `0.9.0` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: HTTP request smuggling
- [Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits](https://agentprime.io/advisories/GHSA-7gpj-mj4q-x62x.md)
  `GHSA-7gpj-mj4q-x62x`, `CVE-2026-105297`, `RUSTSEC-2026-0389` · crates.io `pingora-core`: affected `>=0.0.0-0, <0.8.1`, fixed in `0.8.1` · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service
- [russh: Unbounded memory allocation in agent protocol server via crafted constraint records](https://agentprime.io/advisories/GHSA-4wc5-f2rc-q74m.md)
  `GHSA-4wc5-f2rc-q74m`, `CVE-2026-111061` · crates.io `russh`: affected `<0.64.1`, fixed in `0.64.1` · CVSS 4.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Denial of service
- [A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request](https://agentprime.io/advisories/GHSA-j7h2-66j4-ghjf.md)
  `GHSA-j7h2-66j4-ghjf`, `CVE-2026-111062` · crates.io `russh`: affected `>=0.34.0-beta.1, <0.64.0`, fixed in `0.64.0` · CVSS 2.3 Low · Not analysed yet · Published 19 Oct 2026 · Tags: Weak cryptography or TLS
- [\`wasi-http\`: Guests can add conflicting content lengths to messages](https://agentprime.io/advisories/GHSA-r8xh-cgf7-392j.md)
  `GHSA-r8xh-cgf7-392j`, `CVE-2026-121441`, `RUSTSEC-2026-0376` · crates.io `wasmtime-wasi-http`: affected `>=0.0.0-0, <36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `36.0.19`, `48.0.7`, `49.0.4` · CVSS 6.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: HTTP request smuggling
- [\`wasi-http\` p3: forwarded trailers aren't checked against \`is_forbidden_header\` hook](https://agentprime.io/advisories/GHSA-jxcf-8qw5-5c33.md)
  `GHSA-jxcf-8qw5-5c33`, `CVE-2026-121440`, `RUSTSEC-2026-0377` · crates.io `wasmtime-wasi-http`: affected `>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `48.0.7`, `49.0.4` · CVSS 6.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-424
- [Panic lowering a host-created component model stream into a guest that expects a different payload type](https://agentprime.io/advisories/GHSA-9pvw-hwfg-92h5.md)
  `GHSA-9pvw-hwfg-92h5`, `CVE-2026-115892`, `RUSTSEC-2026-0378` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `48.0.7`, `49.0.4` · CVSS 5.7 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption, CWE-248

Older: <https://agentprime.io/advisories/ecosystem/crates.md?cursor=WyIyMDI2LTEwLTE5VDEyOjAwOjAwLjAwMDAwMFoiLCJHSFNBLTlwdnctaHdmZy05Mmg1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=crates.io>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/crates/>. Everything for agents: <https://agentprime.io/llms.txt>.