Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  intendant-dev/Intendant#1013 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  intendant-dev/Intendant#1012 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  intendant-dev/Intendant#1011 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  intendant-dev/Intendant#1010 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0385: Non-constant-time mask generation and u128 comparisons

  intendant-dev/Intendant#1009 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  intendant-dev/Intendant#1008 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  intendant-dev/Intendant#1007 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0372: zvariant_derive is unmaintained

  intendant-dev/Intendant#1002 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0370: zvariant is unmaintained

  intendant-dev/Intendant#1001 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0371: zbus_names is unmaintained

  intendant-dev/Intendant#1000 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  intendant-dev/Intendant#998 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  intendant-dev/Intendant#999 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  intendant-dev/Intendant#997 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  intendant-dev/Intendant#996 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  intendant-dev/Intendant#995 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  intendant-dev/Intendant#994 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  intendant-dev/Intendant#993 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  intendant-dev/Intendant#992 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  intendant-dev/Intendant#990 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  intendant-dev/Intendant#991 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  intendant-dev/Intendant#989 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0341: Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

  intendant-dev/Intendant#988 · Filter by author github-actions opened on Oct 19, 2026