Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  georgeglarson/rust-connect#64 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  georgeglarson/rust-connect#63 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0372: zvariant_derive is unmaintained

  georgeglarson/rust-connect#62 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0370: zvariant is unmaintained

  georgeglarson/rust-connect#61 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0371: zbus_names is unmaintained

  georgeglarson/rust-connect#60 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  georgeglarson/rust-connect#59 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  georgeglarson/rust-connect#58 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  georgeglarson/rust-connect#57 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  georgeglarson/rust-connect#56 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  georgeglarson/rust-connect#55 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  georgeglarson/rust-connect#54 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  georgeglarson/rust-connect#52 · Filter by author github-actions opened on Sep 21, 2026

• RUSTSEC-2024-0436: paste - no longer maintained

  georgeglarson/rust-connect#44 · Filter by author github-actions opened on Sep 7, 2026

• RUSTSEC-2024-0370: proc-macro-error is unmaintained

  georgeglarson/rust-connect#45 · Filter by author github-actions opened on Sep 7, 2026