Security Digest
Critical crates.io (Rust) advisories
65 critical advisories for crates.io (Rust) packages since October 2023, newest first. Check your project with cargo audit.
- CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning CVE-2026-75856 CVSS 9.2 Critical
deepseek-tui>= 0.8.5, <= 0.8.41 → no fix listed;deepseek-tui>= 0.8.5, < 0.8.41 → fixed in 0.8.41;codewhale-tui>= 0.8.41, < 0.8.64 → fixed in 0.8.64; +1 more packages - lettre has TLS hostname verification disabled when using Boring TLS backend CVE-2026-46428 CVSS 9.1 Critical
lettre>= 0.10.1, < 0.11.22 → fixed in 0.11.22 - `exploration` was removed from crates.io for malicious code GHSA-99j7-fhr2-xfj4
exploration>= 0 → no fix listed - Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action… CVE-2026-54496 CVSS 9.3 Critical
zebrad<= 4.5.1 → fixed in 5.0.0;halo2_gadgets< 0.5.0 → fixed in 0.5.0;orchard< 0.14.0 → fixed in 0.14.0; +1 more packages - zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser CVE-2026-52735 CVSS 9.3 Critical
zebra-script<= 6.0.1 → fixed in 7.0.0;zebrad<= 4.4.1 → fixed in 4.5.0 - Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) CVE-2026-33646 CVSS 9.6 Critical
mise< 2026.3.10 → fixed in 2026.3.10 - BoxLite: Permission Bypass Allows Modification of Read-Only Files CVE-2026-46695 CVSS 10.0 Critical
boxlite< 0.9.0 → fixed in 0.9.0;@boxlite-ai/boxlite< 0.9.0 → fixed in 0.9.0;github.com/boxlite-ai/boxlite/sdks/go< 0.9.0 → fixed in 0.9.0; +2 more packages - Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host CVE-2026-46703 CVSS 9.6 Critical
boxlite< 0.9.0 → fixed in 0.9.0;boxlite-cli< 0.9.0 → fixed in 0.9.0;boxlite< 0.9.0 → fixed in 0.9.0; +2 more packages - DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval CVE-2026-45311 CVSS 9.6 Critical
deepseek-tui>= 0.3.0, < 0.8.23 → fixed in 0.8.23;deepseek-tui-cli>= 0.3.0, < 0.8.23 → fixed in 0.8.23;deepseek-tui>= 0.3.0, < 0.8.23 → fixed in 0.8.23 - DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files CVE-2026-45374 CVSS 9.6 Critical
deepseek-tui< 0.8.26 → fixed in 0.8.26 - Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output GHSA-pvmv-cwg8-v6c8 CVSS 9.3 Critical
zebrad< 4.4.1 → fixed in 4.4.1;zebra-script< 6.0.1 → fixed in 6.0.1 - Zebra's Block Validator Undercounts Coinbase and P2SH Sigops CVE-2026-44498 CVSS 9.2 Critical
zebrad< 4.4.0 → fixed in 4.4.0 - Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer CVE-2026-44497 CVSS 9.3 Critical
zebra-script<= 5.0.1 → fixed in 6.0.0;zebrad< 4.4.0 → fixed in 4.4.0 - Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs GHSA-cwfq-rfcr-8hmp CVSS 9.2 Critical
zebrad< 4.4.0 → fixed in 4.4.0 - `sui-execution-cut` was removed from crates.io for malicious code GHSA-qprh-m6p3-hwxc
sui-execution-cut>= 0 → no fix listed - `mysten-metrics` was removed from crates.io for malicious code GHSA-g38r-8gmr-ghrf
mysten-metrics>= 0 → no fix listed - nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation CVE-2026-33471 CVSS 9.6 Critical
nimiq-block<= 0.2.0 → no fix listed - Brillig: Heap corruption in foreign call results with nested tuple arrays CVE-2026-41197 CVSS 9.3 Critical
brillig<= 1.0.0-beta.18 → fixed in 1.0.0-beta.19 - Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling CVE-2026-41583 CVSS 9.3 Critical
zebrad< 4.3.1 → fixed in 4.3.1;zebra-script< 5.0.2 → fixed in 5.0.2 - Zebra has rk Identity Point Panic in Transaction Verification CVE-2026-41584 CVSS 9.2 Critical
zebrad< 4.3.1 → fixed in 4.3.1;zebra-chain< 6.0.2 → fixed in 6.0.2 - Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access CVE-2026-34987 CVSS 9.2 Critical
wasmtime>= 25.0.0, < 36.0.7 → fixed in 36.0.7;wasmtime>= 37.0.0, < 42.0.2 → fixed in 42.0.2;wasmtime= 43.0.0 → fixed in 43.0.1 - nimiq-blockchain is missing a wall-clock upper bound on block timestamps CVE-2026-40093 CVSS 9.1 Critical
nimiq-blockchain<= 1.3.0 → no fix listed - Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift CVE-2026-34971 CVSS 9.0 Critical
wasmtime>= 32.0.0, < 36.0.7 → fixed in 36.0.7;wasmtime>= 37.0.0, < 42.0.2 → fixed in 42.0.2;wasmtime= 43.0.0 → fixed in 43.0.1 - mpp has multiple payment bypass and griefing vulnerabilities GHSA-fxc9-7j2w-vx54 CVSS 9.3 Critical
mpp< 0.8.0 → fixed in 0.8.0 - Zebra node crash — V5 transaction hash panic (P2P reachable) CVE-2026-34202 CVSS 9.2 Critical
zebrad< 4.3.0 → fixed in 4.3.0;zebra-chain< 6.0.1 → fixed in 6.0.1 - RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface CVE-2026-30960 CVSS 9.4 Critical
rssn< 0.2.9 → fixed in 0.2.9 - Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade CVE-2026-2833 CVSS 9.3 Critical
pingora-core<= 0.7.0 → fixed in 0.8.0 - `time-sync` was removed from crates.io due to malicious code GHSA-mh23-rw7f-v5pq
time-sync>= 0 → no fix listed - Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing CVE-2026-2835 CVSS 9.3 Critical
pingora-core<= 0.7.0 → fixed in 0.8.0 - `dnp3times` was removed from crates.io due to malicious code GHSA-xhw7-jhmp-j62j
dnp3times>= 0 → no fix listed - `time_calibrators` was removed from crates.io due to malicious code GHSA-wf45-3gpw-vrqv
time_calibrators>= 0 → no fix listed - `time_calibrator` was removed from crates.io due to malicious code GHSA-77xj-rrh3-wx3v
time_calibrator>= 0 → no fix listed - zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards GHSA-5wp8-q9mx-8jx8 CVSS 10.0 Critical
zeptoclaw<= 0.6.1 → fixed in 0.6.2 - `tracing-check` was removed from crates.io for malicious code GHSA-5pmp-jpcf-pwx6
tracing-check>= 0 → no fix listed - Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover CVE-2026-27822 CVSS 9.0 Critical
rustfs< 1.0.0-alpha.83 → fixed in 1.0.0-alpha.83 - `polymarket-client-sdks` was removed from crates.io for malicious code GHSA-p5vf-5754-x7p3
polymarket-client-sdks>= 0 → no fix listed - `finch-rst` was removed from crates.io for malicious code GHSA-xp79-9mxw-878j
finch-rst>= 0 → no fix listed - `sha-rst` was removed from crates.io for malicious code GHSA-vgr2-r5hm-f6gf
sha-rst>= 0 → no fix listed - `finch_cli_rust` was removed from crates.io for malicious code GHSA-6v2j-vr4h-f632
finch_cli_rust>= 0 → no fix listed - `uniswap-utils` was removed from crates.io for malicious code GHSA-x468-phr8-h3p3
uniswap-utils>= 0 → no fix listed - `finch-rust` was removed from crates.io for malicious code GHSA-f8h5-x737-x4xr
finch-rust>= 0 → no fix listed - `evm-units` was removed from crates.io for malicious code GHSA-6662-54xr-8423
evm-units>= 0 → no fix listed - `sha-rust` was removed from crates.io for malicious code GHSA-3mmg-7c2q-8938
sha-rust>= 0 → no fix listed - `polymarket-clients-sdk` was removed from crates.io for malicious code GHSA-382q-fpqh-29f7
polymarket-clients-sdk>= 0 → no fix listed - Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema GHSA-5w5r-mf82-595p CVSS 9.3 Critical
capnp< 0.24.0 → fixed in 0.24.0 - dcap-qvl has Missing Verification for QE Identity CVE-2026-22696 CVSS 9.3 Critical
dcap-qvl< 0.3.9 → fixed in 0.3.9;@phala/dcap-qvl<= 0.3.0 → fixed in 0.3.9;@phala/dcap-qvl-web<= 0.3.3 → no fix listed; +2 more packages - Deno node:crypto doesn't finalize cipher CVE-2026-22863 CVSS 9.2 Critical
deno<= 2.5.6 → fixed in 2.6.0 - RustFS has a gRPC Hardcoded Token Authentication Bypass CVE-2025-68926 CVSS 9.8 Critical
rustfs>= 1.0.0-alpha.13, <= 1.0.0-alpha.77 → fixed in 1.0.0-alpha.78 - cggmp21 has a missing check in the ZK proof used in CGGMP21 CVE-2025-66016 CVSS 9.3 Critical
cggmp21< 0.6.3 → fixed in 0.6.3;cggmp24< 0.7.0-alpha.2 → fixed in 0.7.0-alpha.2 - libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs) GHSA-2fjw-whxm-9v4q CVSS 9.3 Critical
nftnl<= 0.8.0 → fixed in 0.9.0 - risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read` CVE-2025-61588 CVSS 9.3 Critical
risc0-zkvm-platform< 2.1.0 → fixed in 2.1.0;risc0-zkos-v1compat< 2.1.0 → fixed in 2.1.0;risc0-aggregation< 0.9 → fixed in 0.9; +2 more packages - SurrealDB server-takeover via SurrealQL injection on backup import CVE-2025-71392 CVSS 9.4 Critical
surrealdb>= 2.2.0, < 2.2.2 → fixed in 2.2.2;surrealdb>= 2.1.0, < 2.1.5 → fixed in 2.1.5;surrealdb< 2.0.5 → fixed in 2.0.5 - Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell` CVE-2025-31477 CVSS 9.3 Critical
tauri-plugin-shell< 2.2.1 → fixed in 2.2.1;@tauri-apps/plugin-shell< 2.2.1 → fixed in 2.2.1 - Namada-apps allows Excessive Computation in Mempool Validation GHSA-f8qm-hmm3-fv7f CVSS 9.2 Critical
namada-apps= 1.0.0 → fixed in 1.1.0 - Namada-apps can Crash with Excessive Computation in Mempool Validation GHSA-82vg-5v4f-f9wq CVSS 9.2 Critical
namada-apps= 1.0.0 → fixed in 1.1.0 - Namada-apps allows Post-Genesis Validator Bypass GHSA-2gw2-qgjg-xh6p
namada-apps= 1.0.0 → fixed in 1.1.0 - ismp-grandpa crate accepted incorrect signatures CVE-2025-24800 CVSS 9.3 Critical
ismp-grandpa< 15.0.1 → fixed in 15.0.1;grandpa-verifier-primitives< 0.1.2 → fixed in 0.1.2;grandpa-verifier< 0.1.2 → fixed in 0.1.2 - jj vulnerable to path traversal via crafted Git repositories CVE-2024-51990 CVSS 9.2 Critical
jj-lib< 0.23.0 → fixed in 0.23.0 - panic on parsing crafted phonenumber inputs CVE-2024-39697 CVSS 9.2 Critical
phonenumber>= 0.3.4, < 0.3.6 → fixed in 0.3.6 - Unable to generate the correct character set CVE-2024-36400 CVSS 9.4 Critical
nano-id< 0.4.0 → fixed in 0.4.0 - qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint CVE-2024-3584 CVSS 9.8 Critical
qdrant= 1.9.0-dev → fixed in 1.9.0 - Spin applications with specific configuration vulnerable to potential network sandbox escape CVE-2024-32980 CVSS 9.1 Critical
spin-sdk< 2.4.3 → fixed in 2.4.3 - Apollo Router vulnerable to Critical Regression In Query Plan Cache CVE-2024-32971 CVSS 9.0 Critical
apollo-router>= 1.44.0, < 1.45.1 → fixed in 1.45.1 - Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result GHSA-q73f-w3h7-7wcc
ckb<= 0.34.1 → fixed in 0.34.2 - Nervos CKB P2P DoS Attacks GHSA-84x2-2qv6-qg56
ckb< 0.34.0 → fixed in 0.34.0