Use-after-free in interned values and cached function results

uncbv: archive extraction is vulnerable to path traversal (zip-slip)

unzip: archive extraction is vulnerable to path traversal (zip-slip)

Rojo development server vulnerable to DNS rebinding, allowing unauthenticated read/write access and local program execution

Potential use-after-free due to lack of panic safety in InlineVec::clear and SerVec::clear

Use-After-Free and Double Free in IntoIter::drop When Element Drop Panics

RustSec Advisory

theshit vulnerable to unsafe loading of user-owned Python rules when running as root

Shell expansion in custom commands

Uninitalized memory read & leak caused by fuser crate

Use after free in Parc and Prc due to missing lifetime constraints

Malicious plugin names, recipients, or identities can cause arbitrary binary execution

Malicious plugin names, recipients, or identities can cause arbitrary binary execution

gix-path improperly resolves configuration path reported by Git

gix-path can use a fake program files location

Traversal outside working tree enables arbitrary code execution

Traversal outside working tree enables arbitrary code execution

Traversal outside working tree enables arbitrary code execution

gix-transport indirect code execution via malicious username

Memory corruption, denial of service, and arbitrary code execution in libgit2

Multiple issues involving quote API

gix-transport code execution vulnerability

libsqlite3-sys via C SQLite CVE-2022-35737

X.509 Email Address 4-byte Buffer Overflow

malicious crate rustdecimal

Safety issues in pkcs11

array! macro is unsound when its length is impure constant

enum_map macro can cause UB when Enum trait is incorrectly implemented

Potential segfault in localtime_r invocations

Uncontrolled Search Path Element in sharkdp/bat

mopa is technically unsound

better-macro has deliberate RCE to prove a point

grep-cli may run arbitrary executables on Windows

Memory access due to code generation flaw in Cranelift module

XSS in mdBook's search page

Potential segfault in the time crate

Argument injection in sendmail transport

futures_task::waker may cause a use-after-free if used on a type that isn't 'static

Stream callback function is not unwind safe

Memory corruption in SmallVec::grow()

Buffer overflow vulnerability in VecDeque::reserve()

Uncontrolled search path element vulnerability in rustdoc plugins