crates.io Advisories.

xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release

• Memory corruption

<0.8.16 · fixed in 0.8.16

rmcp OAuth client fetches server-controlled resource_metadata URLs

• Server-side request forgery (SSRF)

<2.0.0 · fixed in 2.0.0

anymap2 is unmaintained

>=0.0.0-0 · no fixed version yet

Wasmtime wasi:http implementation panics with a zero timeout supplied

• CWE-1284

>=46.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

Guest can panic host through filesystem timestamp before the epoch on wasip3

• CWE-754

>=46.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

WASI preview 0 implementation of `poll_oneoff` circumvents fuel consumption

• Denial of service

>=0.0.0-0, <36.0.17 || >=37.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 36.0.17, 48.0.4, 49.0.2

Rooting for GC values live across `try_call` may be missing, causing GC heap corruption

• Memory corruption

>=47.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

Excessive allocated memory on the host when guests don't have stdio

• Denial of service

>=0.0.0-0, <36.0.17 || >=37.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 36.0.17, 48.0.4, 49.0.2

Mis-typed WebAssembly tag imports can lead to GC heap corruption

• CWE-1287

>=47.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

fd_readdir copies uninitialized struct padding into guest memory

• Memory corruption

>=0.0.0-0, <36.0.17 || >=37.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 36.0.17, 48.0.4, 49.0.2

Wasmtime component async-lifted callback result count is unvalidated, causing a native stack buffer overflow

• CWE-20

>=39.0.0, <48.0.4 || >=49.0.0, <49.0.2 · fixed in 48.0.4, 49.0.2

`pin-utils` is unmaintained

>=0.0.0-0 · no fixed version yet

pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

• Memory corruption
• Denial of service

<0.2.3 · fixed in 0.2.3

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

• Denial of service

<0.63.2 · fixed in 0.63.2

russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

• CWE-129

<0.63.1 · fixed in 0.63.1

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

• CWE-20

<0.63.1 · fixed in 0.63.1

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

• Weak cryptography or TLS

<0.63.0 · fixed in 0.63.0

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

• Authentication bypass

<0.62.6 · fixed in 0.62.6

A 512-byte workbook can provoke a multi-gigabyte allocation and abort the process

>=0.0.0-0, <3.2.0 · fixed in 3.2.0

Sending custom to-device messages may panics

>=0.0.0-0, <0.19.0 · fixed in 0.19.0

Hybrid Encapsulation from Seed Panics on Short Seed

>=0.0.0-0, <0.0.10 · fixed in 0.0.10

Stack overflow on deeply nested LaTeX input

>=0.0.0-0, <1.0.5 · fixed in 1.0.5

`basic-toml` is unmaintained

>=0.0.0-0 · no fixed version yet

Various panics, soundness and resource exhaustion issues

>=0.0.0-0, <0.12.3 · fixed in 0.12.3

yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

• Insecure deserialization

<1.19.0 · fixed in 1.19.0

Use-after-free in interned values and cached function results

>=0.23.0, <0.28.5 · fixed in 0.28.5

`call_ref` and exception `catch` can drop some fuel accounting, leading to exponential fuel amplification

• Denial of service

>=47.0.0, <48.0.3 || >=49.0.0, <49.0.1 · fixed in 48.0.3, 49.0.1

Dynamic record lifting can allocate beyond the hostcall fuel limit

• Denial of service

>=0.0.0-0, <36.0.16 || >=37.0.0, <48.0.3 || >=49.0.0, <49.0.1 · fixed in 36.0.16, 48.0.3, 49.0.1

Guest can panic host through filesystem datetime overflow

• Memory corruption

>=0.0.0-0, <36.0.16 || >=37.0.0, <48.0.3 || >=49.0.0, <49.0.1 · fixed in 36.0.16, 48.0.3, 49.0.1

Outgoing HTTP body write allows guest-driven host memory exhaustion

• Denial of service

>=0.0.0-0, <36.0.16 || >=37.0.0, <48.0.3 || >=49.0.0, <49.0.1 · fixed in 36.0.16, 48.0.3, 49.0.1

Excluded iPAddress name constraints with an all-zero mask are not applied

>=0.0.0-0, <0.3.1 · fixed in 0.3.1

Build environment compiled into the library and readable at runtime

>=0.3.0, <0.6.0 · fixed in 0.6.0

`uncbv`: archive extraction is vulnerable to path traversal (zip-slip)

>=0.0.0-0, <0.3.1 · fixed in 0.3.1

Use-after-free when XML includes have duplicated entities

• Memory corruption

>=0.0.0-0, <2.57.5 || >=2.57.90, <2.60.3 || >=2.61.0, <2.61.5 || >=2.61.90, <2.62.4 || >=2.62.90, <2.63.2 · fixed in 2.57.5, 2.60.3, 2.61.5, 2.62.4, 2.63.2

microsandbox: Secret values exposed in world-readable process arguments

• CWE-214

<0.5.10 · fixed in 0.5.10

`stack-graphs` is archived and unmaintained

>=0.0.0-0 · no fixed version yet

`stack-graphs` C API exports are safe `extern "C"` functions

>=0.0.3-0 · no fixed version yet

Double free in `StackVec::retain` when a predicate or element `Drop` panics

>=0.3.0, <0.3.3 · fixed in 0.3.3

`owned-alloc` is unmaintained

>=0.0.0-0 · no fixed version yet

`unzip` is unmaintained

>=0.0.0-0 · no fixed version yet

Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics

>=0.0.0-0, <0.5.2 · fixed in 0.5.2

Finished streaming calls keep reading a stalled request body indefinitely

>=0.2.0, <0.8.2 || >=0.9.0, <0.9.1 · fixed in 0.8.2, 0.9.1

`SinglyLinkedList::remove` dereferences a null link

>=0.0.0-0, <0.2.1 · fixed in 0.2.1

`hex_decode_unchecked` AVX2 path reads past `src`

>=0.3.0, <0.10.1 · fixed in 0.10.1

`decompress`: tar-family extractors write archive entries without a path-traversal check (tar-slip)

>=0.0.0-0 · no fixed version yet

Unsoundness in UTF-8 'String' trait

• CWE-749

>=0.0.0-0, <0.10.0 || >=0.11.0-0 · fixed in 0.10.0

RMCP: Custom HTTP headers leak to cross-origin redirect targets

• Information disclosure

<2.1.0 · fixed in 2.1.0

pqc_kyber is unmaintained

>=0.0.0-0 · no fixed version yet

cosmian_kyber is unmaintained

>=0.0.0-0 · no fixed version yet

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

• Denial of service

<2.0.0 · fixed in 2.0.0

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

• CWE-345

<2.0.0 · fixed in 2.0.0

Out-of-bounds read when decoding CKA_ALLOWED_MECHANISMS

>=0.0.0-0, <0.10.1 || >=0.11.0, <0.11.1 || >=0.12.0, <0.12.1 · fixed in 0.10.1, 0.11.1, 0.12.1

libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

• CWE-248

<0.13.1 · fixed in 0.13.1

Outgoing datagram buffer accounting can panic the sender in quinn-proto

>=0.11.17, <0.11.18 · fixed in 0.11.18

Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

>=0.7.0, <0.11.18 · fixed in 0.11.18

Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

>=0.11.0, <0.11.18 · fixed in 0.11.18

clear_on_drop is unmaintained

>=0.0.0-0 · no fixed version yet

Use-after-free when a future's `Drop` panics while the container is dropped

>=0.0.0-0, <0.10.3 · fixed in 0.10.3

mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

• Denial of service

<0.8.18 · fixed in 0.8.18

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

• Path traversal
• Server-side request forgery (SSRF)

<0.8.18 · fixed in 0.8.18