Security Advisories

uv: Path traversal on Windows through wheel extraction

GHSA-2cv4-cqwr-gwf7 CVE-2026-104843 MODERATE 8 days ago

### Impact In versions of uv from 0.12.7 to 0.12.18 on Windows, uv could be induced into writing a file outside of the installation prefix during ...

cargo pypi

No PRs yet

Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

GHSA-2mjx-qc3c-rqvc MODERATE 8 days ago

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The han...

cargo

No PRs yet

hickory-resolver follows irrelevant CNAME records

GHSA-6f2x-v7q7-m7m5 MODERATE 8 days ago

When the Hickory DNS resolver follows CNAME records, it sends queries that are not necessary to answer the original recursive query. If there are a...

cargo

2

Dependabot PRs

hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)

GHSA-6w6g-hm98-mhgm HIGH 8 days ago

When the `hickory-resolver` name server pool implementation receives an upstream response with the TC (truncated) header bit set, it re-queues the ...

cargo

3

Dependabot PRs

hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures

GHSA-5j98-2g5x-46v6 HIGH 8 days ago

When calling `Resolver::lookup()` or `Resolver::lookup_ip()` on a resolver with DNSSEC validation enabled, both methods return `Ok(...)` if DNSSEC ...

cargo

3

Dependabot PRs

Praxis affected by HTTP/2 Bomb

GHSA-cjcg-cxmh-9wcr HIGH 11 days ago

### Summary Multiple denial-of-service vulnerabilities have been discovered in HTTP/2 server implementations. All have been rated with a severity ...

cargo

No PRs yet

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

GHSA-2hw9-mc66-jc2q CVE-2026-104855 LOW 11 days ago

### Impact Wasmtime's implementation of bulk-data-transfer WebAssembly instructions, such as `memory.copy`, contains a vulnerability when a preemp...

cargo

1

Dependabot PRs

aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

GHSA-8ffr-xgwf-xj56 CVE-2026-18140 HIGH 11 days ago

### Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, po...

cargo

No PRs yet

xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release

GHSA-6g2r-675j-hx59 LOW 11 days ago

I have a minimized safe Rust witness for xxhash-rust 0.8.15. Safe public route: xxhash_rust::xxh3::xxh3_64_with_secret(&[0x41], &[]) The caller-...

cargo

No PRs yet

rmcp OAuth client fetches server-controlled resource_metadata URLs

GHSA-c9xm-49cp-xcr9 MODERATE 11 days ago

## Summary The `rmcp` OAuth client accepts a server-controlled `resource_metadata=` URL from the `WWW-Authenticate` header and fetches it without ...

cargo

No PRs yet

pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)

GHSA-g4mp-vgx3-xrvm CVE-2026-102820 MODERATE 13 days ago

## Summary `MemoryMap::read` in the `pageant` crate (part of the russh workspace, used by russh's SSH-agent client on Windows via `AgentClient::co...

cargo

3

Dependabot PRs

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

GHSA-35g8-35p8-c8fw CVE-2026-102821 MODERATE 13 days ago

## Summary A russh **server** can be driven to unbounded heap growth (process OOM / kill) by a peer that speaks only standard SSH messages, in the...

cargo

3

Dependabot PRs

russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

GHSA-p8qx-h547-fjw9 CVE-2026-102822 LOW 13 days ago

### Summary `SshBlockCipher` implementations (AES-CBC, AES-CTR, 3DES-CBC, etc.) report `needs_mac() == true`, meaning they are documented/intended ...

cargo

4

Dependabot PRs

russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened

GHSA-47hw-gvq5-r2gm CVE-2026-102823 HIGH 13 days ago

### Summary CVE-2026-68930 was fixed by adding `Session::is_established_channel()` in `russh/src/server/encrypted.rs`, which gates every channel-sc...

cargo

4

Dependabot PRs

Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange

GHSA-w3jg-pjxf-73p4 CVE-2026-102824 MODERATE 13 days ago

## Vulnerability The hybrid ML-KEM 768 + X25519 key exchange implementation in `russh/src/kex/hybrid_mlkem.rs` does not validate that the remote p...

cargo

No PRs yet

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

GHSA-g6xm-f9xp-qq35 CVE-2026-102825 LOW 13 days ago

### Details #### Affected versions and vulnerable location - Confirmed present on default branch `main` at HEAD `0089c89c94753bebbec12b956c07a1cd...

cargo

No PRs yet

Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

GHSA-m6mh-2hw2-555x CVE-2026-102342 MODERATE 14 days ago

The following SVG will produce a link with a `javascript` scheme. If the user clicks this link, they will run it. ```svg <svg xmlns="http://www.w3...

cargo

No PRs yet

yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

GHSA-2jx3-ff3v-j7jj MODERATE 19 days ago

> [!NOTE] > This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification...

cargo

No PRs yet

microsandbox: Secret values exposed in world-readable process arguments

GHSA-m8f5-rh7h-vgg3 CVE-2026-61670 MODERATE 21 days ago

## Summary When the SDK spawns a sandbox, the `msb sandbox` child process receives the full network configuration as an inline `--network-config <...

cargo

No PRs yet

Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)

GHSA-4rf6-qx84-q9fv CVE-2026-68537 HIGH 26 days ago

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a c...

cargo

No PRs yet

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

GHSA-j5cx-ph8g-95v3 CVE-2026-68523 HIGH 26 days ago

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a b...

cargo

No PRs yet

RMCP: Custom HTTP headers leak to cross-origin redirect targets

GHSA-9g45-5xwm-f3wc CVE-2026-64684 MODERATE 26 days ago

## Summary The `rmcp` crate's `StreamableHttpClientTransport` forwards caller-supplied custom HTTP headers (such as `X-API-Key`, `X-Auth-Token`, `...

cargo

No PRs yet

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

GHSA-9pj6-vhgr-3mwh CVE-2026-63128 HIGH 27 days ago

### Summary An unauthenticated remote attacker can leak one entry per HTTP request out of the in-memory session table of `LocalSessionManager` by ...

cargo

No PRs yet

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

GHSA-33f5-2c5q-wgwj CVE-2026-63127 HIGH 27 days ago

### Summary The `rmcp` library does not validate the `resource` parameter in OAuth Protected Resource metadata (RFC 9728), allowing a malicious MCP...

cargo

No PRs yet

libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

GHSA-5hq8-qhww-jm7q CVE-2026-61544 HIGH 28 days ago

### Summary `libp2p-quic` can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp2p TLS certificate and dela...

cargo

No PRs yet

mistral.rs: Unbounded Remote Media Fetch and Video Frame Expansion DoS

GHSA-m3wp-48jr-vr4g HIGH about 1 month ago

## Unbounded Remote Media Fetch and Video Frame Expansion DoS ### Summary The `POST /v1/chat/completions` endpoint in mistral.rs fetches attacker-...

cargo

No PRs yet

mistral.rs Media Loader: Unauthenticated SSRF and arbitrary local file read via image_url

GHSA-wfgq-w7cq-qj7j HIGH about 1 month ago

### Summary mistral.rs fetches any request-supplied image/audio URL with no host or IP validation, and opens arbitrary local files (a `file://` URL...

cargo

No PRs yet

gix-sec safe.directory protections absent for elevated administrators

GHSA-7rhf-42qf-vrvc CVE-2025-24890 MODERATE about 1 month ago

### Summary In a process run with full administrative rights on Windows, `gix-sec` wrongly treats all locations as trusted, leading to the executi...

cargo

No PRs yet

SWC HTML minifier may allow script element breakout when minifying embedded JSON

GHSA-5qr2-v392-m9g8 CVE-2026-72925 MODERATE about 1 month ago

## Impact `@swc/html` minifies JSON contained in `script` elements such as `application/json` and `application/ld+json` by parsing and serializing...

cargo npm

No PRs yet

SurrealDB: Writes in a PERMISSIONS clause bypass table permissions

GHSA-66r2-5gwj-gxm2 CVE-2026-63733 MODERATE about 1 month ago

A `PERMISSIONS ... WHERE` clause is evaluated with permission enforcement disabled, so it can't recurse into its own checks. But the clause could a...

cargo

No PRs yet

SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path

GHSA-848m-r628-vrxw CVE-2026-63735 HIGH about 1 month ago

An authenticated user scoped to one namespace/database could invoke a custom API (`DEFINE API`) belonging to a different namespace/database, reachi...

cargo

No PRs yet