---
title: "Critical crates.io (Rust) advisories"
url: https://erroneo.us/security/ecosystem/crates/
description: "All 65 critical GitHub-reviewed crates.io (Rust) security advisories since October 2023, newest first, with vulnerable ranges and fixed versions."
type: ecosystem
section: "Security Digest"
date_modified: 2026-09-04
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical crates.io (Rust) advisories

- 2026-09-04 [CVE-2026-75856](https://erroneo.us/security/cve/CVE-2026-75856/index.md) CodeWhale: SSRF‌ bypass - TOCTOU on DNS failure for DNS pinning — deepseek-tui >= 0.8.5, <= 0.8.41 → no fix; deepseek-tui >= 0.8.5, < 0.8.41 → 0.8.41; codewhale-tui >= 0.8.41, < 0.8.64 → 0.8.64
- 2026-07-28 [CVE-2026-46428](https://erroneo.us/security/cve/CVE-2026-46428/index.md) lettre has TLS hostname verification disabled when using Boring TLS backend — lettre >= 0.10.1, < 0.11.22 → 0.11.22
- 2026-07-10 [GHSA-99j7-fhr2-xfj4](https://erroneo.us/security/ghsa/GHSA-99j7-fhr2-xfj4/index.md) `exploration` was removed from crates.io for malicious code — exploration >= 0 → no fix
- 2026-07-06 [CVE-2026-54496](https://erroneo.us/security/cve/CVE-2026-54496/index.md) Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness — zebrad <= 4.5.1 → 5.0.0; halo2_gadgets < 0.5.0 → 0.5.0; orchard < 0.14.0 → 0.14.0
- 2026-07-02 [CVE-2026-52735](https://erroneo.us/security/cve/CVE-2026-52735/index.md) zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser — zebra-script <= 6.0.1 → 7.0.0; zebrad <= 4.4.1 → 4.5.0
- 2026-06-22 [CVE-2026-33646](https://erroneo.us/security/cve/CVE-2026-33646/index.md) Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass) — mise < 2026.3.10 → 2026.3.10
- 2026-05-21 [CVE-2026-46695](https://erroneo.us/security/cve/CVE-2026-46695/index.md) BoxLite: Permission Bypass Allows Modification of Read-Only Files — boxlite < 0.9.0 → 0.9.0; @boxlite-ai/boxlite < 0.9.0 → 0.9.0; github.com/boxlite-ai/boxlite/sdks/go < 0.9.0 → 0.9.0
- 2026-05-21 [CVE-2026-46703](https://erroneo.us/security/cve/CVE-2026-46703/index.md) Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host — boxlite < 0.9.0 → 0.9.0; boxlite-cli < 0.9.0 → 0.9.0; boxlite < 0.9.0 → 0.9.0
- 2026-05-14 [CVE-2026-45311](https://erroneo.us/security/cve/CVE-2026-45311/index.md) DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval — deepseek-tui >= 0.3.0, < 0.8.23 → 0.8.23; deepseek-tui-cli >= 0.3.0, < 0.8.23 → 0.8.23; deepseek-tui >= 0.3.0, < 0.8.23 → 0.8.23
- 2026-05-14 [CVE-2026-45374](https://erroneo.us/security/cve/CVE-2026-45374/index.md) DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files — deepseek-tui < 0.8.26 → 0.8.26
- 2026-05-08 [GHSA-pvmv-cwg8-v6c8](https://erroneo.us/security/ghsa/GHSA-pvmv-cwg8-v6c8/index.md) Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output — zebrad < 4.4.1 → 4.4.1; zebra-script < 6.0.1 → 6.0.1
- 2026-05-07 [CVE-2026-44498](https://erroneo.us/security/cve/CVE-2026-44498/index.md) Zebra's Block Validator Undercounts Coinbase and P2SH Sigops — zebrad < 4.4.0 → 4.4.0
- 2026-05-07 [CVE-2026-44497](https://erroneo.us/security/cve/CVE-2026-44497/index.md) Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer — zebra-script <= 5.0.1 → 6.0.0; zebrad < 4.4.0 → 4.4.0
- 2026-05-07 [GHSA-cwfq-rfcr-8hmp](https://erroneo.us/security/ghsa/GHSA-cwfq-rfcr-8hmp/index.md) Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs — zebrad < 4.4.0 → 4.4.0
- 2026-05-04 [GHSA-qprh-m6p3-hwxc](https://erroneo.us/security/ghsa/GHSA-qprh-m6p3-hwxc/index.md) `sui-execution-cut` was removed from crates.io for malicious code — sui-execution-cut >= 0 → no fix
- 2026-05-04 [GHSA-g38r-8gmr-ghrf](https://erroneo.us/security/ghsa/GHSA-g38r-8gmr-ghrf/index.md) `mysten-metrics` was removed from crates.io for malicious code — mysten-metrics >= 0 → no fix
- 2026-04-22 [CVE-2026-33471](https://erroneo.us/security/cve/CVE-2026-33471/index.md) nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation — nimiq-block <= 0.2.0 → no fix
- 2026-04-21 [CVE-2026-41197](https://erroneo.us/security/cve/CVE-2026-41197/index.md) Brillig: Heap corruption in foreign call results with nested tuple arrays — brillig <= 1.0.0-beta.18 → 1.0.0-beta.19
- 2026-04-17 [CVE-2026-41583](https://erroneo.us/security/cve/CVE-2026-41583/index.md) Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling — zebrad < 4.3.1 → 4.3.1; zebra-script < 5.0.2 → 5.0.2
- 2026-04-17 [CVE-2026-41584](https://erroneo.us/security/cve/CVE-2026-41584/index.md) Zebra has rk Identity Point Panic in Transaction Verification — zebrad < 4.3.1 → 4.3.1; zebra-chain < 6.0.2 → 6.0.2
- 2026-04-10 [CVE-2026-34987](https://erroneo.us/security/cve/CVE-2026-34987/index.md) Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access — wasmtime >= 25.0.0, < 36.0.7 → 36.0.7; wasmtime >= 37.0.0, < 42.0.2 → 42.0.2; wasmtime = 43.0.0 → 43.0.1
- 2026-04-10 [CVE-2026-40093](https://erroneo.us/security/cve/CVE-2026-40093/index.md) nimiq-blockchain is missing a wall-clock upper bound on block timestamps — nimiq-blockchain <= 1.3.0 → no fix
- 2026-04-09 [CVE-2026-34971](https://erroneo.us/security/cve/CVE-2026-34971/index.md) Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift — wasmtime >= 32.0.0, < 36.0.7 → 36.0.7; wasmtime >= 37.0.0, < 42.0.2 → 42.0.2; wasmtime = 43.0.0 → 43.0.1
- 2026-03-29 [GHSA-fxc9-7j2w-vx54](https://erroneo.us/security/ghsa/GHSA-fxc9-7j2w-vx54/index.md) mpp has multiple payment bypass and griefing vulnerabilities — mpp < 0.8.0 → 0.8.0
- 2026-03-27 [CVE-2026-34202](https://erroneo.us/security/cve/CVE-2026-34202/index.md) Zebra node crash — V5 transaction hash panic (P2P reachable) — zebrad < 4.3.0 → 4.3.0; zebra-chain < 6.0.1 → 6.0.1
- 2026-03-09 [CVE-2026-30960](https://erroneo.us/security/cve/CVE-2026-30960/index.md) RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface — rssn < 0.2.9 → 0.2.9
- 2026-03-05 [CVE-2026-2833](https://erroneo.us/security/cve/CVE-2026-2833/index.md) Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade — pingora-core <= 0.7.0 → 0.8.0
- 2026-03-05 [GHSA-mh23-rw7f-v5pq](https://erroneo.us/security/ghsa/GHSA-mh23-rw7f-v5pq/index.md) `time-sync` was removed from crates.io due to malicious code — time-sync >= 0 → no fix
- 2026-03-05 [CVE-2026-2835](https://erroneo.us/security/cve/CVE-2026-2835/index.md) Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing — pingora-core <= 0.7.0 → 0.8.0
- 2026-03-04 [GHSA-xhw7-jhmp-j62j](https://erroneo.us/security/ghsa/GHSA-xhw7-jhmp-j62j/index.md) `dnp3times` was removed from crates.io due to malicious code — dnp3times >= 0 → no fix
- 2026-03-04 [GHSA-wf45-3gpw-vrqv](https://erroneo.us/security/ghsa/GHSA-wf45-3gpw-vrqv/index.md) `time_calibrators` was removed from crates.io due to malicious code — time_calibrators >= 0 → no fix
- 2026-03-04 [GHSA-77xj-rrh3-wx3v](https://erroneo.us/security/ghsa/GHSA-77xj-rrh3-wx3v/index.md) `time_calibrator` was removed from crates.io due to malicious code — time_calibrator >= 0 → no fix
- 2026-03-04 [GHSA-5wp8-q9mx-8jx8](https://erroneo.us/security/ghsa/GHSA-5wp8-q9mx-8jx8/index.md) zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards — zeptoclaw <= 0.6.1 → 0.6.2
- 2026-03-02 [GHSA-5pmp-jpcf-pwx6](https://erroneo.us/security/ghsa/GHSA-5pmp-jpcf-pwx6/index.md) `tracing-check` was removed from crates.io for malicious code — tracing-check >= 0 → no fix
- 2026-02-25 [CVE-2026-27822](https://erroneo.us/security/cve/CVE-2026-27822/index.md) Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover — rustfs < 1.0.0-alpha.83 → 1.0.0-alpha.83
- 2026-02-13 [GHSA-p5vf-5754-x7p3](https://erroneo.us/security/ghsa/GHSA-p5vf-5754-x7p3/index.md) `polymarket-client-sdks` was removed from crates.io for malicious code — polymarket-client-sdks >= 0 → no fix
- 2026-02-12 [GHSA-xp79-9mxw-878j](https://erroneo.us/security/ghsa/GHSA-xp79-9mxw-878j/index.md) `finch-rst` was removed from crates.io for malicious code — finch-rst >= 0 → no fix
- 2026-02-12 [GHSA-vgr2-r5hm-f6gf](https://erroneo.us/security/ghsa/GHSA-vgr2-r5hm-f6gf/index.md) `sha-rst` was removed from crates.io for malicious code — sha-rst >= 0 → no fix
- 2026-02-12 [GHSA-6v2j-vr4h-f632](https://erroneo.us/security/ghsa/GHSA-6v2j-vr4h-f632/index.md) `finch_cli_rust` was removed from crates.io for malicious code — finch_cli_rust >= 0 → no fix
- 2026-02-06 [GHSA-x468-phr8-h3p3](https://erroneo.us/security/ghsa/GHSA-x468-phr8-h3p3/index.md) `uniswap-utils` was removed from crates.io for malicious code — uniswap-utils >= 0 → no fix
- 2026-02-06 [GHSA-f8h5-x737-x4xr](https://erroneo.us/security/ghsa/GHSA-f8h5-x737-x4xr/index.md) `finch-rust` was removed from crates.io for malicious code — finch-rust >= 0 → no fix
- 2026-02-06 [GHSA-6662-54xr-8423](https://erroneo.us/security/ghsa/GHSA-6662-54xr-8423/index.md) `evm-units` was removed from crates.io for malicious code — evm-units >= 0 → no fix
- 2026-02-06 [GHSA-3mmg-7c2q-8938](https://erroneo.us/security/ghsa/GHSA-3mmg-7c2q-8938/index.md) `sha-rust` was removed from crates.io for malicious code — sha-rust >= 0 → no fix
- 2026-02-06 [GHSA-382q-fpqh-29f7](https://erroneo.us/security/ghsa/GHSA-382q-fpqh-29f7/index.md) `polymarket-clients-sdk` was removed from crates.io for malicious code — polymarket-clients-sdk >= 0 → no fix
- 2026-01-28 [GHSA-5w5r-mf82-595p](https://erroneo.us/security/ghsa/GHSA-5w5r-mf82-595p/index.md) Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema — capnp < 0.24.0 → 0.24.0
- 2026-01-26 [CVE-2026-22696](https://erroneo.us/security/cve/CVE-2026-22696/index.md) dcap-qvl has Missing Verification for QE Identity — dcap-qvl < 0.3.9 → 0.3.9; @phala/dcap-qvl <= 0.3.0 → 0.3.9; @phala/dcap-qvl-web <= 0.3.3 → no fix
- 2026-01-16 [CVE-2026-22863](https://erroneo.us/security/cve/CVE-2026-22863/index.md) Deno node:crypto doesn't finalize cipher — deno <= 2.5.6 → 2.6.0
- 2025-12-30 [CVE-2025-68926](https://erroneo.us/security/cve/CVE-2025-68926/index.md) RustFS has a gRPC Hardcoded Token Authentication Bypass — rustfs >= 1.0.0-alpha.13, <= 1.0.0-alpha.77 → 1.0.0-alpha.78
- 2025-11-25 [CVE-2025-66016](https://erroneo.us/security/cve/CVE-2025-66016/index.md) cggmp21 has a missing check in the ZK proof used in CGGMP21 — cggmp21 < 0.6.3 → 0.6.3; cggmp24 < 0.7.0-alpha.2 → 0.7.0-alpha.2
- 2025-11-25 [GHSA-2fjw-whxm-9v4q](https://erroneo.us/security/ghsa/GHSA-2fjw-whxm-9v4q/index.md) libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs) — nftnl <= 0.8.0 → 0.9.0
- 2025-10-01 [CVE-2025-61588](https://erroneo.us/security/cve/CVE-2025-61588/index.md) risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read` — risc0-zkvm-platform < 2.1.0 → 2.1.0; risc0-zkos-v1compat < 2.1.0 → 2.1.0; risc0-aggregation < 0.9 → 0.9
- 2025-04-11 [CVE-2025-71392](https://erroneo.us/security/cve/CVE-2025-71392/index.md) SurrealDB server-takeover via SurrealQL injection on backup import — surrealdb >= 2.2.0, < 2.2.2 → 2.2.2; surrealdb >= 2.1.0, < 2.1.5 → 2.1.5; surrealdb < 2.0.5 → 2.0.5
- 2025-04-02 [CVE-2025-31477](https://erroneo.us/security/cve/CVE-2025-31477/index.md) Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell` — tauri-plugin-shell < 2.2.1 → 2.2.1; @tauri-apps/plugin-shell < 2.2.1 → 2.2.1
- 2025-02-20 [GHSA-f8qm-hmm3-fv7f](https://erroneo.us/security/ghsa/GHSA-f8qm-hmm3-fv7f/index.md) Namada-apps allows Excessive Computation in Mempool Validation — namada-apps = 1.0.0 → 1.1.0
- 2025-02-20 [GHSA-82vg-5v4f-f9wq](https://erroneo.us/security/ghsa/GHSA-82vg-5v4f-f9wq/index.md) Namada-apps can Crash with Excessive Computation in Mempool Validation — namada-apps = 1.0.0 → 1.1.0
- 2025-02-20 [GHSA-2gw2-qgjg-xh6p](https://erroneo.us/security/ghsa/GHSA-2gw2-qgjg-xh6p/index.md) Namada-apps allows Post-Genesis Validator Bypass — namada-apps = 1.0.0 → 1.1.0
- 2025-01-28 [CVE-2025-24800](https://erroneo.us/security/cve/CVE-2025-24800/index.md) ismp-grandpa crate accepted incorrect signatures — ismp-grandpa < 15.0.1 → 15.0.1; grandpa-verifier-primitives < 0.1.2 → 0.1.2; grandpa-verifier < 0.1.2 → 0.1.2
- 2024-11-07 [CVE-2024-51990](https://erroneo.us/security/cve/CVE-2024-51990/index.md) jj vulnerable to path traversal via crafted Git repositories — jj-lib < 0.23.0 → 0.23.0
- 2024-07-09 [CVE-2024-39697](https://erroneo.us/security/cve/CVE-2024-39697/index.md) panic on parsing crafted phonenumber inputs — phonenumber >= 0.3.4, < 0.3.6 → 0.3.6
- 2024-06-04 [CVE-2024-36400](https://erroneo.us/security/cve/CVE-2024-36400/index.md) Unable to generate the correct character set — nano-id < 0.4.0 → 0.4.0
- 2024-06-02 [CVE-2024-3584](https://erroneo.us/security/cve/CVE-2024-3584/index.md) qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint — qdrant = 1.9.0-dev → 1.9.0
- 2024-05-08 [CVE-2024-32980](https://erroneo.us/security/cve/CVE-2024-32980/index.md) Spin applications with specific configuration vulnerable to potential network sandbox escape — spin-sdk < 2.4.3 → 2.4.3
- 2024-05-02 [CVE-2024-32971](https://erroneo.us/security/cve/CVE-2024-32971/index.md) Apollo Router vulnerable to Critical Regression In Query Plan Cache — apollo-router >= 1.44.0, < 1.45.1 → 1.45.1
- 2024-02-02 [GHSA-q73f-w3h7-7wcc](https://erroneo.us/security/ghsa/GHSA-q73f-w3h7-7wcc/index.md) Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result — ckb <= 0.34.1 → 0.34.2
- 2024-02-02 [GHSA-84x2-2qv6-qg56](https://erroneo.us/security/ghsa/GHSA-84x2-2qv6-qg56/index.md) Nervos CKB P2P DoS Attacks — ckb < 0.34.0 → 0.34.0

---
Source page: https://erroneo.us/security/ecosystem/crates/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt