Issues

• RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict

  murillo-consulting/Gate#35 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0395: Use-after-free with CParameter::StableInBuffer

  murillo-consulting/Gate#34 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0401: Out-of-bounds read in train_from_buffer when sample sizes overflow

  murillo-consulting/Gate#33 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0396: Seekable reads a NULL or out-of-bounds seek table

  murillo-consulting/Gate#32 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame

  murillo-consulting/Gate#31 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0405: Out-of-bounds read with an out-of-range InBuffer::pos

  murillo-consulting/Gate#30 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0404: Double free in DCtx::try_clone

  murillo-consulting/Gate#29 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream

  murillo-consulting/Gate#27 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0397: OutBuffer::around_pos exposes uninitialized memory

  murillo-consulting/Gate#28 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0402: Heap buffer overflow in CCtx::try_clone on a multithreaded context

  murillo-consulting/Gate#26 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  murillo-consulting/Gate#24 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0410: WebAssembly allocator shim corrupts memory on allocation failure

  murillo-consulting/Gate#25 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end

  murillo-consulting/Gate#23 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

  murillo-consulting/Gate#22 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  murillo-consulting/Gate#21 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  murillo-consulting/Gate#20 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0374: basic-toml is unmaintained

  murillo-consulting/Gate#19 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  murillo-consulting/Gate#18 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  murillo-consulting/Gate#17 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  murillo-consulting/Gate#16 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  murillo-consulting/Gate#15 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  murillo-consulting/Gate#14 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  murillo-consulting/Gate#13 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  murillo-consulting/Gate#12 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  murillo-consulting/Gate#11 · Filter by author github-actions opened on Oct 13, 2026