Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  snowopsdev/selara#160 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  snowopsdev/selara#159 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  snowopsdev/selara#158 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  snowopsdev/selara#157 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0372: zvariant_derive is unmaintained

  snowopsdev/selara#155 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0370: zvariant is unmaintained

  snowopsdev/selara#154 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0371: zbus_names is unmaintained

  snowopsdev/selara#153 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  snowopsdev/selara#152 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  snowopsdev/selara#151 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  snowopsdev/selara#150 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  snowopsdev/selara#148 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  snowopsdev/selara#149 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  snowopsdev/selara#147 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  snowopsdev/selara#146 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  snowopsdev/selara#145 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  snowopsdev/selara#144 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0343: Outgoing datagram buffer accounting can panic the sender in quinn-proto

  snowopsdev/selara#143 · Filter by author github-actions opened on Oct 19, 2026

• Update bundled Codex runtime 0.160.1 → 0.166.0

  codex-runtime-update
  snowopsdev/selara#140 · Filter by author github-actions opened on Oct 12, 2026

• RUSTSEC-2024-0429: Unsoundness in Iterator and DoubleEndedIterator impls for glib::VariantStrIter

  snowopsdev/selara#116 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2025-0098: unic-ucd-version is unmaintained

  snowopsdev/selara#115 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2025-0100: unic-ucd-ident is unmaintained

  snowopsdev/selara#114 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2025-0075: unic-char-range is unmaintained

  snowopsdev/selara#112 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2025-0080: unic-common is unmaintained

  snowopsdev/selara#113 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2025-0081: unic-char-property is unmaintained

  snowopsdev/selara#111 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2026-0192: ttf-parser is unmaintained

  snowopsdev/selara#110 · Filter by author github-actions opened on Sep 14, 2026