# crates.io Advisories.

Every crates.io Advisory we hold (Rust), newest first.

## Records, newest first (an older page)

- [\`wasi-http\` p3: Guests can set incorrect content-length for spliced response bodies](https://agentprime.io/advisories/GHSA-9prg-84vf-g5fc.md)
  `GHSA-9prg-84vf-g5fc`, `CVE-2026-121439`, `RUSTSEC-2026-0375` · crates.io `wasmtime-wasi-http`: affected `>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `48.0.7`, `49.0.4` · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: HTTP request smuggling
- [Bit-packing in Cranelift compiler causes silent overflow and miscompilation](https://agentprime.io/advisories/GHSA-897f-g5gm-fmxm.md)
  `GHSA-897f-g5gm-fmxm`, `CVE-2026-115889`, `RUSTSEC-2026-0380` · crates.io `wasmtime`: affected `>=0.0.0-0, <36.0.19 || >=37.0.0, <43.0.0`, fixed in `36.0.19`, `43.0.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Memory corruption, CWE-197
- [Exponential event growth with \`ENABLE_WIKILINKS\`](https://agentprime.io/advisories/RUSTSEC-2026-0414.md)
  `RUSTSEC-2026-0414` · crates.io `pulldown-cmark`: affected `>=0.13.0, <0.13.5`, fixed in `0.13.5` · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2026
- [Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination](https://agentprime.io/advisories/GHSA-4ch3-9j33-3pmj.md)
  `GHSA-4ch3-9j33-3pmj`, `CVE-2026-58494`, `RUSTSEC-2026-0188` · crates.io `wasmtime-wasi`: affected `<24.0.11 || >=25.0.0, <36.0.12 || >=37.0.0, <45.0.3 || >=46.0.0, <46.0.1`, fixed in `24.0.11`, `36.0.12`, `45.0.3`, `46.0.1` · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control, CWE-281
- [lopdf has a stack overflow via deeply nested PDF objects](https://agentprime.io/advisories/GHSA-6fj4-rcr3-r7rr.md)
  `GHSA-6fj4-rcr3-r7rr`, `RUSTSEC-2026-0187` · crates.io `lopdf`: affected `<0.42.0`, fixed in `0.42.0` · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2026 · Tags: CWE-1124
- [WebAssembly allocator shim corrupts memory on allocation failure](https://agentprime.io/advisories/RUSTSEC-2026-0410.md)
  `RUSTSEC-2026-0410` · crates.io `zstd-sys`: affected `>=2.0.9, <2.1.2`, fixed in `2.1.2` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Use-after-free when changing a multithreaded context with an unfinished frame](https://agentprime.io/advisories/RUSTSEC-2026-0406.md)
  `RUSTSEC-2026-0406` · crates.io `zstd-safe`: affected `>=0.0.0-0, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Out-of-bounds read with an out-of-range \`InBuffer::pos\`](https://agentprime.io/advisories/RUSTSEC-2026-0405.md)
  `RUSTSEC-2026-0405` · crates.io `zstd-safe`: affected `>=7.2.2, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Double free in \`DCtx::try_clone\`](https://agentprime.io/advisories/RUSTSEC-2026-0404.md)
  `RUSTSEC-2026-0404` · crates.io `zstd-safe`: affected `>=4.1.4, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Uninitialized memory exposed when streaming decompression of a legacy frame fails](https://agentprime.io/advisories/RUSTSEC-2026-0403.md)
  `RUSTSEC-2026-0403` · crates.io `zstd-safe`: affected `>=4.0.0, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Heap buffer overflow in \`CCtx::try_clone\` on a multithreaded context](https://agentprime.io/advisories/RUSTSEC-2026-0402.md)
  `RUSTSEC-2026-0402` · crates.io `zstd-safe`: affected `>=4.1.4, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Out-of-bounds read in \`train_from_buffer\` when sample sizes overflow](https://agentprime.io/advisories/RUSTSEC-2026-0401.md)
  `RUSTSEC-2026-0401` · crates.io `zstd-safe`: affected `>=0.0.0-0, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Use-after-free of a dictionary after a one-shot call on a context with an open stream](https://agentprime.io/advisories/RUSTSEC-2026-0400.md)
  `RUSTSEC-2026-0400` · crates.io `zstd-safe`: affected `>=3.0.1, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Use-after-free through \`init_using_cdict\` and \`init_using_ddict\`](https://agentprime.io/advisories/RUSTSEC-2026-0399.md)
  `RUSTSEC-2026-0399` · crates.io `zstd-safe`: affected `>=3.0.0, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [\`Seekable::decompress\` sets a \`Vec\` length beyond its capacity for offsets past the end](https://agentprime.io/advisories/RUSTSEC-2026-0398.md)
  `RUSTSEC-2026-0398` · crates.io `zstd-safe`: affected `>=7.2.2, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [\`OutBuffer::around_pos\` exposes uninitialized memory](https://agentprime.io/advisories/RUSTSEC-2026-0397.md)
  `RUSTSEC-2026-0397` · crates.io `zstd-safe`: affected `>=4.0.0, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [\`Seekable\` reads a NULL or out-of-bounds seek table](https://agentprime.io/advisories/RUSTSEC-2026-0396.md)
  `RUSTSEC-2026-0396` · crates.io `zstd-safe`: affected `>=7.2.2, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Use-after-free with \`CParameter::StableInBuffer\`](https://agentprime.io/advisories/RUSTSEC-2026-0395.md)
  `RUSTSEC-2026-0395` · crates.io `zstd-safe`: affected `>=4.1.0, <7.4.0 || >=8.0.0-0, <8.2.0`, fixed in `7.4.0`, `8.2.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Out-of-bounds read when training a dictionary from inconsistent sample sizes](https://agentprime.io/advisories/RUSTSEC-2026-0393.md)
  `RUSTSEC-2026-0393` · crates.io `zstd`: affected `>=0.1.1, <0.4.10`, fixed in `0.4.10` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Uninitialized memory exposed by \`write::Decoder\` on a corrupt legacy frame](https://agentprime.io/advisories/RUSTSEC-2026-0392.md)
  `RUSTSEC-2026-0392` · crates.io `zstd`: affected `>=0.4.22, <0.8.0`, fixed in `0.8.0` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Data from an abandoned stream leaks into the next stream on a reused context](https://agentprime.io/advisories/RUSTSEC-2026-0391.md)
  `RUSTSEC-2026-0391` · crates.io `zstd`: affected `>=0.13.2, <0.13.4 || >=0.14.0-0, <0.14.3`, fixed in `0.13.4`, `0.14.3` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [\`zvariant_derive\` is unmaintained](https://agentprime.io/advisories/RUSTSEC-2026-0372.md)
  `RUSTSEC-2026-0372` · crates.io `zvariant_derive`: affected `>=0.0.0-0`, no fixed version yet · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [\`zbus_names\` is unmaintained](https://agentprime.io/advisories/RUSTSEC-2026-0371.md)
  `RUSTSEC-2026-0371` · crates.io `zbus_names`: affected `>=0.0.0-0`, no fixed version yet · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [\`zvariant\` is unmaintained](https://agentprime.io/advisories/RUSTSEC-2026-0370.md)
  `RUSTSEC-2026-0370` · crates.io `zvariant`: affected `>=0.0.0-0`, no fixed version yet · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Missing case-insensitive matching for CSS url function](https://agentprime.io/advisories/GHSA-x43w-36pp-96g3.md)
  `GHSA-x43w-36pp-96g3`, `RUSTSEC-2026-0373` · crates.io `ammonia`: affected `>=0.0.0-0, <4.1.8 || >=4.2.0, <4.2.4`, fixed in `4.1.8`, `4.2.4` · No CVSS score · Not analysed yet · Published 16 Oct 2026
- [Stack overflow when parsing deeply nested input in pest_grammars](https://agentprime.io/advisories/GHSA-7632-4q2x-hvjw.md)
  `GHSA-7632-4q2x-hvjw`, `RUSTSEC-2026-0366` · crates.io `pest_grammars`: affected `>=0.0.0-0, <2.9.3`, fixed in `2.9.3` · CVSS 3.3 Low · Not analysed yet · Published 16 Oct 2026
- [mise permits untrusted local configuration to override default shell arguments](https://agentprime.io/advisories/GHSA-g74g-rg72-j2p3.md)
  `GHSA-g74g-rg72-j2p3`, `CVE-2026-103929` · crates.io `mise`: affected `<2026.7.14`, fixed in `2026.7.14` · CVSS 7.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: Command injection, Broken access control
- [Remote DoS through unchecked \`IdList\` allocation in negentropy](https://agentprime.io/advisories/RUSTSEC-2026-0365.md)
  `RUSTSEC-2026-0365` · crates.io `negentropy`: affected `>=0.2.0, <0.4.4 || >=0.5.0, <0.5.2`, fixed in `0.4.4`, `0.5.2` · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026
- [Stack overflow dropping a long chain of recursive types](https://agentprime.io/advisories/GHSA-wjc8-633q-pwxr.md)
  `GHSA-wjc8-633q-pwxr`, `CVE-2026-119137`, `RUSTSEC-2026-0359` · crates.io `wasmtime`: affected `>=42.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [\`wasi-http\`: Request with long url before query parameter crashes host](https://agentprime.io/advisories/GHSA-w36r-2hch-9xp9.md)
  `GHSA-w36r-2hch-9xp9`, `CVE-2026-119131`, `RUSTSEC-2026-0351` · crates.io `wasmtime-wasi-http`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Wasmtime may not properly enforce async-entrypoint requirement](https://agentprime.io/advisories/GHSA-vcg5-q8m5-8379.md)
  `GHSA-vcg5-q8m5-8379`, `CVE-2026-119136`, `RUSTSEC-2026-0362` · crates.io `wasmtime`: affected `>=42.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1265
- [Component-model handle tables are capped only per instance and charged to no limit](https://agentprime.io/advisories/GHSA-q554-3cjc-rx7p.md)
  `GHSA-q554-3cjc-rx7p`, `CVE-2026-119134`, `RUSTSEC-2026-0363` · crates.io `wasmtime`: affected `>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `36.0.18`, `48.0.6`, `49.0.3` · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Exception tags can cause host data structures to be unaligned](https://agentprime.io/advisories/GHSA-p79w-pv2r-29qp.md)
  `GHSA-p79w-pv2r-29qp`, `CVE-2026-119133`, `RUSTSEC-2026-0364` · crates.io `wasmtime`: affected `>=47.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 2.1 Low · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-758
- [Filesystem sandbox escape when renaming symlinks with trailing slashes](https://agentprime.io/advisories/GHSA-m9f7-9w4p-gv38.md)
  `GHSA-m9f7-9w4p-gv38`, `CVE-2026-118688`, `RUSTSEC-2026-0352` · crates.io `wasmtime-wasi`: affected `>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `36.0.18`, `48.0.6`, `49.0.3` · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-61
- [Panic when invoking an async-lifted function via \`call\`](https://agentprime.io/advisories/GHSA-m6w2-jwq2-cv2c.md)
  `GHSA-m6w2-jwq2-cv2c`, `CVE-2026-119139`, `RUSTSEC-2026-0353` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Panic when pending calls are run after a trap](https://agentprime.io/advisories/GHSA-hmwq-g22x-qjw5.md)
  `GHSA-hmwq-g22x-qjw5`, `CVE-2026-119138`, `RUSTSEC-2026-0361` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Out-of-bounds zero-length stream writes can panic](https://agentprime.io/advisories/GHSA-93g3-36p8-x2gc.md)
  `GHSA-93g3-36p8-x2gc`, `CVE-2026-119143`, `RUSTSEC-2026-0357` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-129
- [Panic on erroneous call-to-host from guest realloc call](https://agentprime.io/advisories/GHSA-7v24-42x9-pxf7.md)
  `GHSA-7v24-42x9-pxf7`, `CVE-2026-119141`, `RUSTSEC-2026-0356` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1265
- [Panic viewing component model stream or future as the wrong type](https://agentprime.io/advisories/GHSA-63h4-6cx9-pjfj.md)
  `GHSA-63h4-6cx9-pjfj`, `CVE-2026-119135`, `RUSTSEC-2026-0355` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Guests can send absolute-form HTTP requests to different hosts](https://agentprime.io/advisories/GHSA-5qpp-g3j2-8frx.md)
  `GHSA-5qpp-g3j2-8frx`, `CVE-2026-119130`, `RUSTSEC-2026-0350` · crates.io `wasmtime-wasi-http`: affected `>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `36.0.18`, `48.0.6`, `49.0.3` · CVSS 2.1 Low · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-20
- [Yielding in a component start function can lead to a host panic](https://agentprime.io/advisories/GHSA-5hhx-4wrr-3j9g.md)
  `GHSA-5hhx-4wrr-3j9g`, `CVE-2026-119140`, `RUSTSEC-2026-0358` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-372
- [Overlapping string transcode in a fused adapter can panic](https://agentprime.io/advisories/GHSA-54p9-vhhq-8f7q.md)
  `GHSA-54p9-vhhq-8f7q`, `CVE-2026-119132`, `RUSTSEC-2026-0360` · crates.io `wasmtime`: affected `>=49.0.0, <49.0.3`, fixed in `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Host panic when component \`call_async\` is cancelled under some conditions](https://agentprime.io/advisories/GHSA-3r89-v5mq-j5xf.md)
  `GHSA-3r89-v5mq-j5xf`, `CVE-2026-119142`, `RUSTSEC-2026-0354` · crates.io `wasmtime`: affected `>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3`, fixed in `48.0.6`, `49.0.3` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [\`AsyncFd::new\` and related constructors violate I/O safety](https://agentprime.io/advisories/RUSTSEC-2026-0386.md)
  `RUSTSEC-2026-0386` · crates.io `tokio`: affected `>=0.3.2, <1.51.6 || >=1.52.0, <1.53.3`, fixed in `1.51.6`, `1.53.3` · No CVSS score · Not analysed yet · Published 13 Oct 2026
- [Decompression bomb in \`ruzstd\`: a tiny input can exhaust memory (OOM)](https://agentprime.io/advisories/RUSTSEC-2026-0344.md)
  `RUSTSEC-2026-0344` · crates.io `ruzstd`: affected `>=0.0.0-0, <0.9.1`, fixed in `0.9.1` · CVSS 7.5 High · Not analysed yet · Published 11 Oct 2026
- [ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target](https://agentprime.io/advisories/GHSA-4684-h2q9-2vcp.md)
  `GHSA-4684-h2q9-2vcp`, `RUSTSEC-2026-0369` · crates.io `zip`: affected `>=0.0.0-0, <9.0.0`, fixed in `9.0.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026
- [Poly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or more](https://agentprime.io/advisories/GHSA-xr22-8pqp-gwfh.md)
  `GHSA-xr22-8pqp-gwfh`, `RUSTSEC-2026-0337` · crates.io `ic-cipher`: affected `>=0.2.5, <0.2.20`, fixed in `0.2.20` · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026
- [MIKEY message MAC is never verified on receive, so forged messages are accepted](https://agentprime.io/advisories/GHSA-xq78-wvcv-hqvj.md)
  `GHSA-xq78-wvcv-hqvj`, `RUSTSEC-2026-0336` · crates.io `mykey`: affected `>=0.0.0-0, <2.0.0`, fixed in `2.0.0` · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026
- [Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation](https://agentprime.io/advisories/GHSA-vv5m-jxxh-4627.md)
  `GHSA-vv5m-jxxh-4627`, `RUSTSEC-2026-0367` · crates.io `zip`: affected `>=0.0.0-0, <9.0.0`, fixed in `9.0.0` · CVSS 7.3 High · Not analysed yet · Published 9 Oct 2026
- [Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key](https://agentprime.io/advisories/GHSA-fwjg-cm92-j3hj.md)
  `GHSA-fwjg-cm92-j3hj`, `RUSTSEC-2026-0335` · crates.io `mykey`: affected `>=0.0.0-0, <2.0.0`, fixed in `2.0.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026
- [zip: \`ZipArchive::extract\` creates symbolic links whose attacker-controlled targets are outside the destination directory](https://agentprime.io/advisories/GHSA-4v9h-p7m9-rh26.md)
  `GHSA-4v9h-p7m9-rh26`, `RUSTSEC-2026-0368` · crates.io `zip`: affected `>=0.0.0-0, <9.0.0`, fixed in `9.0.0` · No CVSS score · Not analysed yet · Published 9 Oct 2026
- [Resource budgets not enforced on the typed deserialization path](https://agentprime.io/advisories/GHSA-4xcc-23fx-w2wj.md)
  `GHSA-4xcc-23fx-w2wj`, `RUSTSEC-2026-0333` · crates.io `noyalib`: affected `>=0.0.0-0, <0.0.53`, fixed in `0.0.53` · No CVSS score · Not analysed yet · Published 6 Oct 2026
- [uv: Path traversal on Windows through wheel extraction](https://agentprime.io/advisories/GHSA-2cv4-cqwr-gwf7.md)
  `GHSA-2cv4-cqwr-gwf7`, `CVE-2026-104843`, `PYSEC-2026-4305` · crates.io `uv` and 1 more: affected `>=0.12.7, <0.12.18`, fixed in `0.12.18` · CVSS 5.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal
- [Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries](https://agentprime.io/advisories/GHSA-2mjx-qc3c-rqvc.md)
  `GHSA-2mjx-qc3c-rqvc`, `RUSTSEC-2026-0285` · crates.io `rustls`: affected `>=0.23.13, <0.23.45`, fixed in `0.23.45` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026
- [hickory-resolver follows irrelevant CNAME records](https://agentprime.io/advisories/GHSA-6f2x-v7q7-m7m5.md)
  `GHSA-6f2x-v7q7-m7m5` · crates.io `hickory-resolver`: affected `>=0.25.0, <0.26.2`, fixed in `0.26.2` · CVSS 4.0, no score published · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [hickory-resolver: Unbounded TC-retry loop in \`NameServerPool::try_send\` (resource-exhaustion DoS)](https://agentprime.io/advisories/GHSA-6w6g-hm98-mhgm.md)
  `GHSA-6w6g-hm98-mhgm` · crates.io `hickory-resolver`: affected `>=0.26.0-beta.1, <0.26.2`, fixed in `0.26.2` · CVSS 4.0, no score published · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, CWE-406
- [hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures](https://agentprime.io/advisories/GHSA-5j98-2g5x-46v6.md)
  `GHSA-5j98-2g5x-46v6`, `CVE-2026-93657` · crates.io `hickory-resolver`: affected `<0.26.2`, fixed in `0.26.2` · CVSS 8.7 High · Not analysed yet · Published 5 Oct 2026 · Tags: Weak cryptography or TLS
- [\`astral-tl\` is unmaintained](https://agentprime.io/advisories/RUSTSEC-2026-0444.md)
  `RUSTSEC-2026-0444` · crates.io `astral-tl`: affected `>=0.0.0-0`, no fixed version yet · No CVSS score · Not analysed yet · Published 5 Oct 2026
- [Praxis affected by HTTP/2 Bomb](https://agentprime.io/advisories/GHSA-cjcg-cxmh-9wcr.md)
  `GHSA-cjcg-cxmh-9wcr` · crates.io `praxis-proxy`: affected `<0.5.2`, fixed in `0.5.2` · CVSS 7.5 High · Not analysed yet · Published 2 Oct 2026 · Tags: CWE-409
- [aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers](https://agentprime.io/advisories/GHSA-8ffr-xgwf-xj56.md)
  `GHSA-8ffr-xgwf-xj56`, `CVE-2026-18140` · crates.io `aws-smithy-json`: affected `<0.62.7`, fixed in `0.62.7` · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/ecosystem/crates.md>
Older: <https://agentprime.io/advisories/ecosystem/crates.md?cursor=WyIyMDI2LTEwLTAyVDIyOjQ0OjUyLjAwMDAwMFoiLCJHSFNBLThmZnIteGd3Zi14ajU2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=crates.io&cursor=WyIyMDI2LTEwLTE5VDEyOjAwOjAwLjAwMDAwMFoiLCJHSFNBLTlwdnctaHdmZy05Mmg1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/crates/?cursor=WyIyMDI2LTEwLTE5VDEyOjAwOjAwLjAwMDAwMFoiLCJHSFNBLTlwdnctaHdmZy05Mmg1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.