Issues

• RUSTSEC-2026-0459: libsqlite3-sys via C SQLite CVE-2026-119375

  heiervang-technologies/unleash#493 · Filter by author github-actions opened on Nov 9, 2026

• RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream

  heiervang-technologies/unleash#492 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict

  heiervang-technologies/unleash#491 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0396: Seekable reads a NULL or out-of-bounds seek table

  heiervang-technologies/unleash#490 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0401: Out-of-bounds read in train_from_buffer when sample sizes overflow

  heiervang-technologies/unleash#489 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0402: Heap buffer overflow in CCtx::try_clone on a multithreaded context

  heiervang-technologies/unleash#488 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame

  heiervang-technologies/unleash#487 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0404: Double free in DCtx::try_clone

  heiervang-technologies/unleash#486 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0405: Out-of-bounds read with an out-of-range InBuffer::pos

  heiervang-technologies/unleash#485 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0397: OutBuffer::around_pos exposes uninitialized memory

  heiervang-technologies/unleash#484 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0395: Use-after-free with CParameter::StableInBuffer

  heiervang-technologies/unleash#483 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  heiervang-technologies/unleash#481 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0410: WebAssembly allocator shim corrupts memory on allocation failure

  heiervang-technologies/unleash#482 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end

  heiervang-technologies/unleash#480 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

  heiervang-technologies/unleash#479 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  heiervang-technologies/unleash#478 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  heiervang-technologies/unleash#476 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  heiervang-technologies/unleash#475 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  heiervang-technologies/unleash#471 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  heiervang-technologies/unleash#470 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  heiervang-technologies/unleash#469 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  heiervang-technologies/unleash#468 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  heiervang-technologies/unleash#467 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  heiervang-technologies/unleash#466 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  heiervang-technologies/unleash#465 · Filter by author github-actions opened on Oct 13, 2026