Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  harehare/minder#38 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  harehare/minder#37 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0378: Panic lowering a host-created component model stream into a guest that expects a different payload type

  harehare/minder#36 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0379: Cranelift backend on aarch64 can jump to incorrect target on large Wasm br_table instruction

  harehare/minder#35 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  harehare/minder#34 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0352: Filesystem sandbox escape when renaming symlinks with trailing slashes

  harehare/minder#33 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0354: Host panic when component call_async is cancelled under some conditions

  harehare/minder#32 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0355: Panic viewing component model stream or future as the wrong type

  harehare/minder#31 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0356: Panic on erroneous call-to-host from guest realloc call

  harehare/minder#29 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0357: Out-of-bounds zero-length stream writes can panic

  harehare/minder#30 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0363: Component-model handle tables are capped only per instance and charged to no limit

  harehare/minder#28 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0359: Stack overflow dropping a long chain of recursive types

  harehare/minder#27 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0353: Panic when invoking an async-lifted function via call

  harehare/minder#26 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0361: Panic when pending calls are run after a trap

  harehare/minder#24 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0362: Wasmtime may not properly enforce async-entrypoint requirement

  harehare/minder#25 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0358: Yielding in a component start function can lead to a host panic

  harehare/minder#23 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  harehare/minder#22 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  harehare/minder#21 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  harehare/minder#20 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  harehare/minder#19 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0343: Outgoing datagram buffer accounting can panic the sender in quinn-proto

  harehare/minder#17 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  harehare/minder#18 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2021-0157: Incorrect escaping for url("") functions in CSS style attributes

  harehare/minder#16 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0373: Missing case-insensitive matching for CSS url function

  harehare/minder#15 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2021-0158: XSS in ammonia via SVG animateMotion, animateTransform, and/or animateColor tags

  harehare/minder#14 · Filter by author github-actions opened on Oct 19, 2026