Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  httuicom/httui#146 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  httuicom/httui#145 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  httuicom/httui#144 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  httuicom/httui#143 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0385: Non-constant-time mask generation and u128 comparisons

  httuicom/httui#142 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0372: zvariant_derive is unmaintained

  httuicom/httui#141 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0370: zvariant is unmaintained

  httuicom/httui#140 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0371: zbus_names is unmaintained

  httuicom/httui#139 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  httuicom/httui#138 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  httuicom/httui#137 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  httuicom/httui#136 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  httuicom/httui#135 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  httuicom/httui#134 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  httuicom/httui#133 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  httuicom/httui#132 · Filter by author github-actions opened on Oct 12, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  httuicom/httui#131 · Filter by author github-actions opened on Oct 12, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  httuicom/httui#130 · Filter by author github-actions opened on Oct 12, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  httuicom/httui#129 · Filter by author github-actions opened on Oct 12, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  httuicom/httui#128 · Filter by author github-actions opened on Sep 21, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  httuicom/httui#124 · Filter by author github-actions opened on Aug 24, 2026

• RUSTSEC-2026-0253: Potential use-after-free due to lack of panic safety in LruCache::pop()

  httuicom/httui#122 · Filter by author github-actions opened on Aug 17, 2026

• RUSTSEC-2026-0235: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc

  httuicom/httui#121 · Filter by author github-actions opened on Aug 10, 2026

• RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot

  httuicom/httui#119 · Filter by author github-actions opened on Aug 3, 2026

• RUSTSEC-2026-0190: Unsoundness in Error::downcast_mut()

  httuicom/httui#112 · Filter by author github-actions opened on Jul 6, 2026

• RUSTSEC-2026-0195: Unbounded namespace-declaration allocation in NsReader enables memory-exhaustion denial of service

  httuicom/httui#111 · Filter by author github-actions opened on Jul 6, 2026