2026-10
“crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64”osv.dev ›
2026-11
“aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers”osv.dev ›
“webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logic”osv.dev ›
“Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries”osv.dev ›
“Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.”osv.dev ›
“rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share”osv.dev ›