hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compression

During message encoding, `hickory-proto`'s `BinEncoder` stores pointers to labels that are candidates for name compressi

历史摘要 · 未重新核验 · GitHub Advisory

hickory-proto: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

The NSEC3 closest-encloser proof validation in `hickory-proto`'s (0.25.0-alpha.3 ... 0.25.2) and `hickory-net`'s (0.26.0

历史摘要 · 未重新核验 · GitHub Advisory

rust-zserio has Unbounded Memory Allocation

### Impact When deserializing arrays, strings or bytes (blob) types zserio first reads the size of the variable, and th

历史摘要 · 未重新核验 · GitHub Advisory

wasmtime has a panic when allocating a table exceeding the size of the host's address space

CVE-2026-44216

### Impact Wasmtime's allocation logic for a WebAssembly table contained checked arithmetic which panicked on overflow.

历史摘要 · 未重新核验 · GitHub Advisory

diesel-async may expose uninitialized padding bytes for MySQL temporal columns

### Summary diesel-async exposes uninitialized stack padding to safe code on every read of a MySQL `DATE`, `TIME`, `DAT

历史摘要 · 未重新核验 · GitHub Advisory

gix-fs: Symlink prefix-reuse allows worktree escape during checkout

CVE-2026-44471

### Summary A malicious tree can be constructed that will, when checked out with gitoxide, permit writing an attacker-c

历史摘要 · 未重新核验 · GitHub Advisory

Lemmy resend-verification endpoint exposes registered email addresses to unauthenticated users

## Summary The unauthenticated resend-verification endpoint returns different responses for registered and unregistered

历史摘要 · 未重新核验 · GitHub Advisory

ldap3_proto has LDAP Filter stack exhaustion

### Impact LDAP queries are not validated for depth, which can cause the parser (both PEG and ASN) to exhaust the stack.

历史摘要 · 未重新核验 · GitHub Advisory

kanidmd_lib: Image upload validators run before authorization; PNG validator panics on malformed input

### Summary The `POST /v1/domain/_image` and `POST /v1/oauth2/{rs_name}/_image` handlers call `validate_image()` on the

历史摘要 · 未重新核验 · GitHub Advisory

scim_proton and kanidm_proto have an authenticated process abort via SCIM filter stack exhaustion

### Summary A single unauthenticated `GET` to any `/scim/v1/...` endpoint with a `?filter=` query string of a few thous

历史摘要 · 未重新核验 · GitHub Advisory

Kanidm has non-constant-time comparison of OAuth2 client_secret

### Summary The kanidmd OAuth2 token-exchange (`/oauth2/token`) and token-introspection (`/oauth2/token/introspect`) en

历史摘要 · 未重新核验 · GitHub Advisory

Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery

### Summary The kanidmd web UI renders the WebAuthn passkey-registration challenge as raw JSON inside an inline `` elem

历史摘要 · 未重新核验 · GitHub Advisory

webauthn-rs-core/webauthn-authenticator-rs: Origin validation mismatch possible when subdomains are allowed

### Summary `webauthn-rs-core` ([Relying Party][rp]) and `webauthn-authenticator-rs` ([client][]) checked that [an `Ori

历史摘要 · 未重新核验 · GitHub Advisory

rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs

CVE-2026-42327

`X509Ref::ocsp_responders` returns OCSP responder URLs from a certificate's AIA extension as `OpensslString`, whose `Der

历史摘要 · 未重新核验 · GitHub Advisory

RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover

## Summary `ListServiceAccount` (`GET /rustfs/admin/v3/list-service-accounts?user=`) authorizes cross-user requests aga

历史摘要 · 未重新核验 · GitHub Advisory

gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

## **Summary** attachments: [pocs.zip](https://github.com/user-attachments/files/26431422/pocs.zip) Submodule names com

历史摘要 · 未重新核验 · GitHub Advisory

gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

## Summary attachments: [pocs.zip](https://github.com/user-attachments/files/26431422/pocs.zip) When `Repository::subm

历史摘要 · 未重新核验 · GitHub Advisory

KVerus: Scalable and Resilient Formal Verification Proof Generation for Rust Code

形式化验证是确保软件正确性和安全性的最高保证，但将其应用于大规模、不断演变的系统仍面临重大挑战。尽管大语言模型（LLM）在自动证明生成方面展现出潜力，但由于无法处理复杂的跨模块依赖关系或代码库及验证工具链的变化，它们在实际应用中常常失败。本

历史摘要 · 未重新核验 · arXiv cs.CR

sequoia-git has broken hard revocation handling

Before `sq-git` checks if a commit can be authenticated, it first looks for hard revocations. Because parsing a policy

历史摘要 · 未重新核验 · GitHub Advisory

`mysten-metrics` was removed from crates.io for malicious code

`mysten-metrics` included a build script that attempted to exfiltrate data from the build machine. The malicious crate

历史摘要 · 未重新核验 · GitHub Advisory