crates.io Advisories.

`astral-tokio-tar` is unmaintained

>=0.0.0-0 · no fixed version yet

Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads

• Memory corruption
• CWE-20

>=33.0.0, <57.3.2 || >=58.0.0, <58.4.1 || >=59.0.0, <59.3.2 || >=60.0.0, <60.1.0 · fixed in 57.3.2, 58.4.1, 59.3.2, 60.1.0

Unbounded memory allocation in `evtx` parsing a `.wevtcache` file

>=0.11.0, <0.15.1 · fixed in 0.15.1

Path traversal in `rio-vt` Kitty graphics protocol handler allows out-of-bounds file delete (and read)

>=0.0.0-0, <0.5.29 · fixed in 0.5.29

`ant-releases`: extracting a release archive can write files outside the destination directory (path traversal / zip-slip)

>=0.0.0-0 · no fixed version yet

`codeq`: decoding untrusted input can allocate memory from an unchecked length prefix (denial of service)

>=0.0.0-0, <0.6.3 · fixed in 0.6.3

russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation

• Broken access control

<0.65 · fixed in 0.65

pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)

• Denial of service

>=0.2.0, <0.2.5 · fixed in 0.2.5

russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

• Denial of service

>=0.60.0, <0.65 · fixed in 0.65

russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages

• Denial of service

<0.65.0 · fixed in 0.65.0

russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets

• Denial of service

<0.65 · fixed in 0.65

`nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)

>=0.0.0-0, <0.6.0 · fixed in 0.6.0

BLAKE2b produces wrong tag when using `reset()` with a different-length key

>=0.0.0-0, <0.17.16 || >=0.18.0-0, <0.18.1 · fixed in 0.17.16, 0.18.1

LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time

>=0.0.0-0, <0.17.16 || >=0.18.0-0, <0.18.1 · fixed in 0.17.16, 0.18.1

zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size

• Denial of service

>=5.1.0, <9.0.0 · fixed in 9.0.0

zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.

• Path traversal
• CWE-61

>=7.2.0, <9.0.0 · fixed in 9.0.0

zip: AES Entry HMAC Authentication Bypass on Premature EOF

• CWE-354
• CWE-1284

>=0.6.0, <9.0.0 · fixed in 9.0.0

zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction

• Denial of service

>=1.3.0, <9.0.0 · fixed in 9.0.0

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

• CWE-20

>=3.0.0, <3.4.3 || >=4.0.0, <4.11.1 · fixed in 3.4.3, 4.11.1

`sn-releases`: `extract_release_archive` writes archive entries without a path-traversal check (zip-slip)

>=0.0.0-0 · no fixed version yet

Cross-engine type confusion with host-created struct-types-with-supertypes

>=47.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1 · fixed in 48.0.8, 49.0.5, 50.0.1

wasip3 UDP `send` can deliver a datagram to an address only allowed for receiving

>=48.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1 · fixed in 48.0.8, 49.0.5, 50.0.1

wasi-http p2: outgoing content-length can be invalid or not match body

>=0.0.0-0, <36.0.20 || >=37.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1 · fixed in 36.0.20, 48.0.8, 49.0.5, 50.0.1

Unbounded memory use on large request bodies

>=0.0.0-0, <0.9.1 · fixed in 0.9.1

Unchecked memory usage in transferring borrowed resources between components

>=0.0.0-0, <36.0.20 || >=37.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1 · fixed in 36.0.20, 48.0.8, 49.0.5, 50.0.1

Typed functions with `i31` or `nullref` arguments may panic due to insufficient type-check

>=47.0.0, <48.0.8 || >=49.0.0, <49.0.5 || >=50.0.0, <50.0.1 · fixed in 48.0.8, 49.0.5, 50.0.1

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

• CWE-691

<36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 36.0.19, 48.0.7, 49.0.4

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

• CWE-20
• CWE-436

<9.0.5 · fixed in 9.0.5

Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input

>=0.0.0-0, <0.38.0 · fixed in 0.38.0

Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`

>=0.13.0, <0.13.6 · fixed in 0.13.6

Unbounded memory use on large request bodies

>=0.0.0-0, <0.10.1 · fixed in 0.10.1

libz-sys build script leaks environment variables in the build directory

>=1.0.21, <1.1.31 · fixed in 1.1.31

Excessive CPU and memory use on crafted GraphQL documents

>=0.0.0-0, <0.17.2 · fixed in 0.17.2

Stack overflow on deeply nested GraphQL documents

>=0.0.0-0, <0.17.2 · fixed in 0.17.2

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

• Information disclosure

>=0.23.44, <0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2 · fixed in 0.23.46, 0.24.0-dev.2

rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share

• CWE-757

<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2 · fixed in 0.23.46, 0.24.0-dev.2

Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs

• CWE-212

<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2 · fixed in 0.23.46, 0.24.0-dev.2

Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.

• Denial of service

<0.23.46 || >=0.24.0-dev.1, <0.24.0-dev.2 · fixed in 0.23.46, 0.24.0-dev.2

Arbitrary code execution when rerunning tests from a portable recording

>=0.9.125, <0.9.150 · fixed in 0.9.150

Use-after-free of caller-owned server name in client connection constructors

>=0.12.0, <0.15.7 · fixed in 0.15.7

Use-after-free from a comparator that answers inconsistently

>=0.0.0-0, <1.3.0 · fixed in 1.3.0

Aliasing violations in splice, mutable iteration and cursors

>=0.0.0-0, <1.3.0 · fixed in 1.3.0

Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root

• Path traversal

<3.34.0 · fixed in 3.34.0

Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root

• Path traversal

>=2.68.0, <3.34.0 · fixed in 3.34.0

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

• CWE-349

>=0.88.0, <0.90.0 · fixed in 0.90.0

Multiple timing variability issues in operations intended to be constant-time

>=0.0.0-0, <0.7.6 · fixed in 0.7.6

Non-constant-time mask generation and `u128` comparisons

>=0.0.0-0, <0.4.4 · fixed in 0.4.4

ammonia: mXSS via MathML `annotation-xml` encoding strip

• Cross-site scripting (XSS)

<3.3.2 || >=4.0.0, <4.0.2 || >=4.1.0, <4.1.3 · fixed in 3.3.2, 4.0.2, 4.1.3

Out-of-bounds read in `Log2Cache::nlog2n()`, `nlog2n_difference()` and `plog2p()`

>=0.0.0-0, <0.7.0 · fixed in 0.7.0

SSRF and local file disclosure via unvalidated URLs

>=0.0.0-0, <2.1.0 · fixed in 2.1.0

Slack Morphism verifier errors disclose valid HMACs in the logs

• Information disclosure

>=1.0.0, <2.28.0 · fixed in 2.28.0

Race condition in `tokio::time::Interval` on Tokio v1.54.0

• Race condition

>=1.54.0, <1.54.1 · fixed in 1.54.1

Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deployments

• HTTP request smuggling

>=0.0.0-0, <0.9.0 · fixed in 0.9.0

Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass

• HTTP request smuggling

>=0.0.0-0, <0.9.0 · fixed in 0.9.0

Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits

• Denial of service

>=0.0.0-0, <0.8.1 · fixed in 0.8.1

russh: Unbounded memory allocation in agent protocol server via crafted constraint records

• Denial of service

<0.64.1 · fixed in 0.64.1

A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request

• Weak cryptography or TLS

>=0.34.0-beta.1, <0.64.0 · fixed in 0.64.0

`wasi-http`: Guests can add conflicting content lengths to messages

• HTTP request smuggling

>=0.0.0-0, <36.0.19 || >=37.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 36.0.19, 48.0.7, 49.0.4

`wasi-http` p3: forwarded trailers aren't checked against `is_forbidden_header` hook

• CWE-424

>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 48.0.7, 49.0.4

Panic lowering a host-created component model stream into a guest that expects a different payload type

• Memory corruption
• CWE-248

>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 48.0.7, 49.0.4