Transaction::from_json holds an input txid that is not 64 hex digits and writes the input as spending the zero txid

Transaction readers accept trailing bytes, so a parsed transaction can carry another transaction id

Signature::from_der reads a signature with bytes after it, a wrong sequence length or an unneeded zero as the signature

Unbounded memory allocation in evtx parsing a .wevtcache file

Unbounded memory allocation in thrift binary protocol read_bytes

Integer overflow in tract-nnef NNEF tensor parser leads to out-of-bounds read on model load

tokio-tar parses PAX extended headers incorrectly, allows file smuggling

phonenumber: panic on parsing crafted phonenumber inputs

blurhash: panic on parsing crafted blurhash inputs

phonenumber: panic on parsing crafted RF3966 phonenumber inputs

Integer overflow in hyper's parsing of the Transfer-Encoding header leads to data loss

Lenient hyper header parsing of Content-Length could allow request smuggling

Denial of service through parsing payloads with too big exponent

Unexpected panic in multihash from_slice parsing code