crates.io Advisories.

`wasi-http` p3: Guests can set incorrect content-length for spliced response bodies

• HTTP request smuggling

>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4 · fixed in 48.0.7, 49.0.4

Bit-packing in Cranelift compiler causes silent overflow and miscompilation

• Memory corruption
• CWE-197

>=0.0.0-0, <36.0.19 || >=37.0.0, <43.0.0 · fixed in 36.0.19, 43.0.0

Exponential event growth with `ENABLE_WIKILINKS`

>=0.13.0, <0.13.5 · fixed in 0.13.5

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

• Broken access control
• CWE-281

<24.0.11 || >=25.0.0, <36.0.12 || >=37.0.0, <45.0.3 || >=46.0.0, <46.0.1 · fixed in 24.0.11, 36.0.12, 45.0.3, 46.0.1

lopdf has a stack overflow via deeply nested PDF objects

• CWE-1124

<0.42.0 · fixed in 0.42.0

WebAssembly allocator shim corrupts memory on allocation failure

>=2.0.9, <2.1.2 · fixed in 2.1.2

Use-after-free when changing a multithreaded context with an unfinished frame

>=0.0.0-0, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Out-of-bounds read with an out-of-range `InBuffer::pos`

>=7.2.2, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Double free in `DCtx::try_clone`

>=4.1.4, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Uninitialized memory exposed when streaming decompression of a legacy frame fails

>=4.0.0, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Heap buffer overflow in `CCtx::try_clone` on a multithreaded context

>=4.1.4, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Out-of-bounds read in `train_from_buffer` when sample sizes overflow

>=0.0.0-0, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Use-after-free of a dictionary after a one-shot call on a context with an open stream

>=3.0.1, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Use-after-free through `init_using_cdict` and `init_using_ddict`

>=3.0.0, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end

>=7.2.2, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

`OutBuffer::around_pos` exposes uninitialized memory

>=4.0.0, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

`Seekable` reads a NULL or out-of-bounds seek table

>=7.2.2, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Use-after-free with `CParameter::StableInBuffer`

>=4.1.0, <7.4.0 || >=8.0.0-0, <8.2.0 · fixed in 7.4.0, 8.2.0

Out-of-bounds read when training a dictionary from inconsistent sample sizes

>=0.1.1, <0.4.10 · fixed in 0.4.10

Uninitialized memory exposed by `write::Decoder` on a corrupt legacy frame

>=0.4.22, <0.8.0 · fixed in 0.8.0

Data from an abandoned stream leaks into the next stream on a reused context

>=0.13.2, <0.13.4 || >=0.14.0-0, <0.14.3 · fixed in 0.13.4, 0.14.3

`zvariant_derive` is unmaintained

>=0.0.0-0 · no fixed version yet

`zbus_names` is unmaintained

>=0.0.0-0 · no fixed version yet

`zvariant` is unmaintained

>=0.0.0-0 · no fixed version yet

Missing case-insensitive matching for CSS url function

>=0.0.0-0, <4.1.8 || >=4.2.0, <4.2.4 · fixed in 4.1.8, 4.2.4

Stack overflow when parsing deeply nested input in pest_grammars

>=0.0.0-0, <2.9.3 · fixed in 2.9.3

mise permits untrusted local configuration to override default shell arguments

• Command injection
• Broken access control

<2026.7.14 · fixed in 2026.7.14

Remote DoS through unchecked `IdList` allocation in negentropy

>=0.2.0, <0.4.4 || >=0.5.0, <0.5.2 · fixed in 0.4.4, 0.5.2

Stack overflow dropping a long chain of recursive types

• Denial of service

>=42.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

`wasi-http`: Request with long url before query parameter crashes host

• Memory corruption

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Wasmtime may not properly enforce async-entrypoint requirement

• CWE-1265

>=42.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Component-model handle tables are capped only per instance and charged to no limit

• Denial of service

>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 36.0.18, 48.0.6, 49.0.3

Exception tags can cause host data structures to be unaligned

• CWE-758

>=47.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Filesystem sandbox escape when renaming symlinks with trailing slashes

• CWE-61

>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 36.0.18, 48.0.6, 49.0.3

Panic when invoking an async-lifted function via `call`

• Denial of service

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Panic when pending calls are run after a trap

• Denial of service

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Out-of-bounds zero-length stream writes can panic

• CWE-129

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Panic on erroneous call-to-host from guest realloc call

• CWE-1265

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Panic viewing component model stream or future as the wrong type

• Denial of service

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Guests can send absolute-form HTTP requests to different hosts

• CWE-20

>=0.0.0-0, <36.0.18 || >=37.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 36.0.18, 48.0.6, 49.0.3

Yielding in a component start function can lead to a host panic

• CWE-372

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

Overlapping string transcode in a fused adapter can panic

• Denial of service

>=49.0.0, <49.0.3 · fixed in 49.0.3

Host panic when component `call_async` is cancelled under some conditions

• Denial of service

>=46.0.0, <48.0.6 || >=49.0.0, <49.0.3 · fixed in 48.0.6, 49.0.3

`AsyncFd::new` and related constructors violate I/O safety

>=0.3.2, <1.51.6 || >=1.52.0, <1.53.3 · fixed in 1.51.6, 1.53.3

Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)

>=0.0.0-0, <0.9.1 · fixed in 0.9.1

ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

>=0.0.0-0, <9.0.0 · fixed in 9.0.0

Poly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or more

>=0.2.5, <0.2.20 · fixed in 0.2.20

MIKEY message MAC is never verified on receive, so forged messages are accepted

>=0.0.0-0, <2.0.0 · fixed in 2.0.0

Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

>=0.0.0-0, <9.0.0 · fixed in 9.0.0

Pre-shared key mode transmits the TGK in cleartext, exposing the SRTP master key

>=0.0.0-0, <2.0.0 · fixed in 2.0.0

zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory

>=0.0.0-0, <9.0.0 · fixed in 9.0.0

Resource budgets not enforced on the typed deserialization path

>=0.0.0-0, <0.0.53 · fixed in 0.0.53

uv: Path traversal on Windows through wheel extraction

• Path traversal

>=0.12.7, <0.12.18 · fixed in 0.12.18

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

>=0.23.13, <0.23.45 · fixed in 0.23.45

hickory-resolver follows irrelevant CNAME records

• Denial of service

>=0.25.0, <0.26.2 · fixed in 0.26.2

hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)

• Denial of service
• CWE-406

>=0.26.0-beta.1, <0.26.2 · fixed in 0.26.2

hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

• Weak cryptography or TLS

<0.26.2 · fixed in 0.26.2

`astral-tl` is unmaintained

>=0.0.0-0 · no fixed version yet

Praxis affected by HTTP/2 Bomb

• CWE-409

<0.5.2 · fixed in 0.5.2

aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

• Denial of service

<0.62.7 · fixed in 0.62.7