Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| rustsec-2026-0300 | Use-after-free in `clear` and `retain` when an element's `Drop` panics | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0299 | `owned-alloc` is unmaintained | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0298 | Use-after-free when a future's `Drop` panics while the container is dropped | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0297 | `unzip`: archive extraction is vulnerable to path traversal (zip-slip) | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0296 | `unzip` is unmaintained | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0295 | Memory corruption bug on `ApplyResult` type | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0294 | Unsoundness in UTF-8 'String' trait | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0293 | Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0292 | Double free / use-after-free in `Chunk` and `InlineArray` removal methods when an element's `Drop` panics | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0291 | Double free in `OwnedAlloc::drop_in_place` when the contained value's `Drop` panics | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0104 | Reachable panic in certificate revocation list parsing | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0099 | Name constraints were accepted for certificates asserting a wildcard name | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0098 | Name constraints for URI names were incorrectly accepted | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0049 | CRLs not considered authoritative by Distribution Point due to faulty matching logic | UNKNOWN | osv_rustsec | unknown | |
| ghsa-xgp8-3hg3-c2mh | webpki: Name constraints were accepted for certificates asserting a wildcard name | UNKNOWN | 2.2 | ghsa | unknown |
| ghsa-pwjx-qhcg-rvj4 | webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic | UNKNOWN | 4.4 | ghsa | unknown |
| ghsa-82j2-j2ch-gfr8 | rustls-webpki: Denial of service via panic on malformed CRL BIT STRING | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-965h-392x-2mh5 | webpki: Name constraints for URI names were incorrectly accepted | UNKNOWN | 2.2 | ghsa | unknown |
| rustsec-2026-0290 | pqc_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery | UNKNOWN | 7.4 | osv_rustsec | unknown |
| rustsec-2026-0289 | pqc_kyber is unmaintained | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0288 | cosmian_kyber: AVX2 backend skips Fujisaki-Okamoto implicit rejection, enabling chosen-ciphertext key recovery | UNKNOWN | 7.4 | osv_rustsec | unknown |
| rustsec-2026-0287 | cosmian_kyber is unmaintained | UNKNOWN | osv_rustsec | unknown | |
| rustsec-2026-0201 | Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service) | UNKNOWN | 7.5 | osv_rustsec | unknown |
| rustsec-2026-0200 | Unbounded page slicing from attacker-controlled CSS height causes denial of service | UNKNOWN | 7.5 | osv_rustsec | unknown |
| ghsa-j5cx-ph8g-95v3 | Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-4rf6-qx84-q9fv | Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service) | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-9g45-5xwm-f3wc | RMCP: Custom HTTP headers leak to cross-origin redirect targets | UNKNOWN | 6.8 | ghsa | unknown |
| rustsec-2026-0286 | Out-of-bounds read when decoding CKA_ALLOWED_MECHANISMS | UNKNOWN | osv_rustsec | unknown | |
| ghsa-9pj6-vhgr-3mwh | RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service | UNKNOWN | 7.5 | ghsa | unknown |
| ghsa-33f5-2c5q-wgwj | RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery | UNKNOWN | 8.2 | ghsa | unknown |