Issues

• RUSTSEC-2026-0402: Heap buffer overflow in CCtx::try_clone on a multithreaded context

  mstuart/code-memory#69 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame

  mstuart/code-memory#68 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0395: Use-after-free with CParameter::StableInBuffer

  mstuart/code-memory#67 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0397: OutBuffer::around_pos exposes uninitialized memory

  mstuart/code-memory#66 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0396: Seekable reads a NULL or out-of-bounds seek table

  mstuart/code-memory#65 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0405: Out-of-bounds read with an out-of-range InBuffer::pos

  mstuart/code-memory#64 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0404: Double free in DCtx::try_clone

  mstuart/code-memory#63 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0401: Out-of-bounds read in train_from_buffer when sample sizes overflow

  mstuart/code-memory#61 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict

  mstuart/code-memory#62 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream

  mstuart/code-memory#60 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0410: WebAssembly allocator shim corrupts memory on allocation failure

  mstuart/code-memory#59 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  mstuart/code-memory#58 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end

  mstuart/code-memory#57 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

  mstuart/code-memory#56 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0418: libz-sys build script leaks environment variables in the build directory

  mstuart/code-memory#55 · Filter by author github-actions opened on Nov 2, 2026

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  mstuart/code-memory#51 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  mstuart/code-memory#50 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  mstuart/code-memory#49 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0385: Non-constant-time mask generation and u128 comparisons

  mstuart/code-memory#48 · Filter by author github-actions opened on Oct 26, 2026

• Security: 1 high/critical advisory(ies) in dependencies

  security-audit
  mstuart/code-memory#47 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  mstuart/code-memory#46 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  mstuart/code-memory#45 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  mstuart/code-memory#44 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  mstuart/code-memory#43 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  mstuart/code-memory#42 · Filter by author github-actions opened on Oct 19, 2026