MirChecker: Detecting Bugs in Rust Programs via Static Analysis.

Rust 作为一种系统级编程语言，通过强大的类型系统和所有权模型在编译时保证内存安全，但实际应用中仍然存在运行时崩溃和内存安全错误，可能导致可利用漏洞。现有静态分析工具在检测 Rust 程序中的缺陷时存在精度或覆盖面的不足。本文提出 Mir

历史摘要 · 未重新核验 · ACM CCS

dynoxide: DNS rebinding and cross-origin CSRF via MCP HTTP transport

## Summary dynoxide's MCP HTTP transport was vulnerable to DNS rebinding via its transitive `rmcp` dependency, plus a r

历史摘要 · 未重新核验 · GitHub Advisory

rkyv: Panic safety bugs in `InlineVec::clear` and `SerVec::clear` enable arbitrary code execution

`InlineVec::clear()` and `SerVec::clear()` in `rkyv` were not panic-safe. Both functions iterate over their elements and

历史摘要 · 未重新核验 · GitHub Advisory

nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

CVE-2026-40092

### Impact A malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record containing

历史摘要 · 未重新核验 · GitHub Advisory

DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files

CVE-2026-45374

### Summary The `task_create` tool spawns durable sub-agents that inherit two insecure defaults: - `allow_shell` defau

历史摘要 · 未重新核验 · GitHub Advisory

DeepSeek TUI has SSRF‌ IPV6 bypass

CVE-2026-45373

### Summary Although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6

历史摘要 · 未重新核验 · GitHub Advisory

DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval

CVE-2026-45311

### Summary The `run_tests` tool executes `cargo test` in the workspace with `ApprovalRequirement::Auto`, meaning it ru

历史摘要 · 未重新核验 · GitHub Advisory

DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool

CVE-2026-45310

### Summary The `fetch_url` tool validates the initial URL's resolved IP address against a restricted-IP blocklist (`is_

历史摘要 · 未重新核验 · GitHub Advisory

Anchor: `InterfaceAccount` allows account substitution between unexpected types

### Impact Any uses of `InterfaceAccount` allows another unexpected account type to be passed, after https://github.com/

历史摘要 · 未重新核验 · GitHub Advisory

Anchor: Program<'info, System> is not properly validated

CVE-2026-45137

### Summary An logic error causes anchor programs to accept any program id when requiring the system program id, causing

历史摘要 · 未重新核验 · GitHub Advisory

smallbitvec: Integer overflow in safe API leads to heap buffer overflow

CVE-2026-44983

### Summary An integer overflow in the internal capacity calculation of `smallbitvec` can lead to an undersized heap all

历史摘要 · 未重新核验 · GitHub Advisory

Zebra has Permanent Block Discovery Halt via Gossip Queue Saturation and Syncer Poisoning

CVE-2026-44499

## Summary A composite denial-of-service vulnerability in Zebra's block discovery pipeline allows an unauthenticated re

历史摘要 · 未重新核验 · GitHub Advisory

rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding

CVE-2026-44662

`CipherCtxRef::cipher_update`, `CipherCtxRef::cipher_update_vec`, and `symm::Crypter::update` incorrectly sized output b

历史摘要 · 未重新核验 · GitHub Advisory

Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs

# `Zebra` Transparent `SIGHASH_SINGLE` Corresponding-Output Handling Diverges From `zcashd` ### Summary For V5+ transpa

历史摘要 · 未重新核验 · GitHub Advisory

Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

CVE-2026-44497

# CVE-2026-44497: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer ## Summary The fi

历史摘要 · 未重新核验 · GitHub Advisory

Zebra Vulnerable to Allocation Amplification in Inbound Network Deserializers

CVE-2026-44500

# CVE-2026-44500: Allocation Amplification in Inbound Network Deserializers ## Summary Several inbound deserialization

历史摘要 · 未重新核验 · GitHub Advisory

Zebra's Block Validator Undercounts Coinbase and P2SH Sigops

CVE-2026-44498

Zebra's block validator undercounts transparent signature operations against the 20000-sigop block limit (`MAX_BLOCK_SIG

历史摘要 · 未重新核验 · GitHub Advisory

imageproc: integer overflow in kernel size check leads to out-of-bounds read

A bounds verification of a slice storage of a 2-dimensional matrix's coefficients (a kernel) would compare the total siz

历史摘要 · 未重新核验 · GitHub Advisory

imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This

历史摘要 · 未重新核验 · GitHub Advisory

imageproc has fragile bounds check when sampling from image

A read of pixels was coded as modifying coordinates to lie within the image bounds. It would calculate a coordinate by a

历史摘要 · 未重新核验 · GitHub Advisory