Search results

RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero

Status: Open.

#75 In init4tech/signet;

· github-actions opened on Mar 24, 2026

RUSTSEC-2026-0067: unpack_in can chmod arbitrary directories by following symlinks

Status: Open.

#74 In init4tech/signet;

· github-actions opened on Mar 24, 2026

RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

Status: Open.

#73 In init4tech/signet;

· github-actions opened on Mar 21, 2026

RUSTSEC-2026-0048: CRL Distribution Point Scope Check Logic Error in AWS-LC

Status: Open.

#72 In init4tech/signet;

· github-actions opened on Mar 21, 2026

RUSTSEC-2026-0046: PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

Status: Open.

#71 In init4tech/signet;

· github-actions opened on Mar 21, 2026

RUSTSEC-2026-0045: Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

Status: Open.

#70 In init4tech/signet;

· github-actions opened on Mar 21, 2026

RUSTSEC-2026-0044: AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN

Status: Open.

#69 In init4tech/signet;

· github-actions opened on Mar 21, 2026

RUSTSEC-2026-0047: PKCS7_verify Signature Validation Bypass in AWS-LC

Status: Open.

#68 In init4tech/signet;

· github-actions opened on Mar 21, 2026

RUSTSEC-2026-0041: Decompressing invalid data can leak information from uninitialized memory or reused output buffer

Status: Open.

#63 In init4tech/signet;

· github-actions opened on Mar 18, 2026

RUSTSEC-2026-0037: Denial of service in Quinn endpoints

Status: Open.

#59 In init4tech/signet;

· github-actions opened on Mar 10, 2026