Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_rustsec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_android
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_linux
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulncheck_kev
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| rustsec-2026-0428 | BLAKE2b produces wrong tag when using `reset()` with a different-length key | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0426 | LLVM introduces timing-vulnerable optimizations into ML-KEM and ML-DSA operations intended to be constant-time | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0436 | Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed input | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0433 | Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS` | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0418 | libz-sys build script leaks environment variables in the build directory | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0417 | Excessive CPU and memory use on crafted GraphQL documents | UNKNOWN | 7.5 | osv_rustsec | unknown |
| rustsec-2026-0416 | Stack overflow on deeply nested GraphQL documents | UNKNOWN | 7.5 | osv_rustsec | unknown |
| rustsec-2026-0387 | Multiple timing variability issues in operations intended to be constant-time | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0385 | Non-constant-time mask generation and `u128` comparisons | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0429 | zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0382 | Certificate verification may accept distrusted intermediates | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0414 | Exponential event growth with `ENABLE_WIKILINKS` | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0410 | WebAssembly allocator shim corrupts memory on allocation failure | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0403 | Uninitialized memory exposed when streaming decompression of a legacy frame fails | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0398 | `Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0391 | Data from an abandoned stream leaks into the next stream on a reused context | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0373 | Missing case-insensitive matching for CSS url function | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0349 | Unauthenticated ServerHello can downgrade later connections to classical key exchange | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0348 | Brotli certificate decompression can allocate up to 1 GiB before authentication | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0347 | Buffered application data sent to outer server after ECH rejection | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0346 | `Debug` impls for client session values expose TLS secrets | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0344 | Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM) | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0369 | ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0368 | zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0367 | Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0286 | Out-of-bounds read when decoding CKA_ALLOWED_MECHANISMS | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0258 | h2 unbounded empty DATA frames | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0257 | Unix `BROWSER` handling allows browser argument injection | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0204 | Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0195 | Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service | UNKNOWN | osv_rustsec | unknown |