| {"adv_id": "RUSTSEC-2019-0007", "crate": "asn1_der", "date": "2019-06-13", "url": "https://github.com/KizzyCode/asn1_der/issues/1", "title": "Processing of maliciously crafted length fields causes memory allocation SIGABRTs", "categories": [], "affected_functions": [], "bug_class": ["other"], "pre_version": "0.6.1", "post_version": "0.6.2", "stage": "strict_safe", "changed_files": ["src/der/value.rs"], "changed_lines": 11, "unsafe_in_changed_files": 0, "changed_functions": ["der::value::deserialize"], "charon_ok": true, "aeneas_ok": true, "fn_present": true, "lean_ok": true, "translated": true, "error": null, "lean_lines": 132, "seconds": 7.7, "item_id": "adv-RUSTSEC-2019-0007", "kind": "advisory", "labels": {"buggy": "asn1_der@0.6.1", "reference": "asn1_der@0.6.2"}} |
| {"adv_id": "RUSTSEC-2026-0124", "crate": "libcrux-chacha20poly1305", "date": "2026-03-29", "url": "https://github.com/cryspen/libcrux/pull/1386", "title": "Potential Panic on Overlong Ciphertext Buffer", "categories": [], "affected_functions": ["libcrux_chacha20poly1305::encrypt", "libcrux_chacha20poly1305::xchacha20_poly1305::encrypt"], "bug_class": ["panic"], "pre_version": "0.0.7", "post_version": "0.0.8", "stage": "strict_safe", "changed_files": ["src/impl_hacl.rs"], "changed_lines": 5, "unsafe_in_changed_files": 0, "changed_functions": ["impl_hacl::encrypt"], "charon_ok": true, "aeneas_ok": true, "fn_present": true, "lean_ok": true, "translated": true, "error": null, "lean_lines": 2737, "seconds": 88.7, "item_id": "adv-RUSTSEC-2026-0124", "kind": "advisory", "labels": {"buggy": "libcrux-chacha20poly1305@0.0.7", "reference": "libcrux-chacha20poly1305@0.0.8"}} |
| {"adv_id": "RUSTSEC-2026-0274", "crate": "rtrb", "date": "2026-08-04", "url": "https://github.com/mgeier/rtrb/issues/185", "title": "Double free / use-after-free in `ReadChunk::commit` when an element's `Drop` panics", "categories": ["memory-corruption"], "affected_functions": ["rtrb::chunks::ReadChunk::commit", "rtrb::chunks::ReadChunk::commit_all"], "bug_class": ["panic", "dos_loop_or_recursion"], "pre_version": "0.3.4", "post_version": "0.3.5", "stage": "diff_safe", "changed_files": ["src/chunks.rs"], "changed_lines": 31, "unsafe_in_changed_files": 98, "changed_functions": ["chunks::commit_unchecked"], "charon_ok": true, "aeneas_ok": true, "fn_present": true, "lean_ok": true, "translated": true, "error": null, "lean_lines": 299, "seconds": 4.7, "item_id": "adv-RUSTSEC-2026-0274", "kind": "advisory", "labels": {"buggy": "rtrb@0.3.4", "reference": "rtrb@0.3.5"}} |
| {"adv_id": "RUSTSEC-2026-0312", "crate": "x509-validator", "date": "2026-09-24", "url": "https://github.com/namecare/x509-validator/commit/da661f8ecee820e05d089a76ecb654ff52a2c987", "title": "Excluded iPAddress name constraints with an all-zero mask are not applied", "categories": ["crypto-failure"], "affected_functions": [], "bug_class": ["logic"], "pre_version": "0.3.0", "post_version": "0.3.1", "stage": "strict_safe", "changed_files": ["src/rfc5280/ip_constraints.rs"], "changed_lines": 34, "unsafe_in_changed_files": 0, "changed_functions": ["rfc5280::ip_constraints::is_valid_cidr_mask"], "charon_ok": true, "aeneas_ok": true, "fn_present": true, "lean_ok": true, "translated": true, "error": null, "lean_lines": 221, "seconds": 19.4, "item_id": "adv-RUSTSEC-2026-0312", "kind": "advisory", "labels": {"buggy": "x509-validator@0.3.0", "reference": "x509-validator@0.3.1"}} |
|
|
