All pull requests

Pull requests

• Add advisory for perpetual: Histogram builders index with get_unchecked from safe fun...

  #3266·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for may: wakeup indexes the event-fd vector with get_unchecked

  #3265·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for libsql-sqlite3-parser: keyword_token treats arbitrary bytes as UTF-8

  #3264·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for j4rs: to_rust_string and drop_c_string were safe public FFI helpers

  #3263·lwz23 opened Sep 23, 2026·

  ·
  3

• Add advisory for gpu-allocator: from_winapi_d3d12_resource_desc dereferenced a caller...

  #3262·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for gdal: _string and _pathbuf called CStr::from_ptr on an unchecked...

  #3261·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for capnp: set_capability_pointer dereferenced a raw pointer in a safe f...

  #3260·lwz23 opened Sep 23, 2026·

  ·
  1

• Add advisory for sqlite-loadable: set_argv_index and set_omit dereference usage u...

  #3259·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for rutie: parse_arguments reads a caller-supplied pointer as a slice

  #3258·lwz23 opened Sep 23, 2026·

  ·
  1

• Add advisory for asm-lsp: get_str and get_string build a str without checking UTF-8

  #3253·lwz23 opened Sep 23, 2026·

  ·
  1

• Add advisory for workflow-core: buffer_as_slice builds a &[T] without checking `fro...

  #3252·lwz23 opened Sep 23, 2026·

  ·

• Add advisory for faster-hex: hex_decode_unchecked AVX2 path reads past src

  #3250·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory for bun_collections: SinglyLinkedList::remove dereferences a null link

  #3249·lwz23 opened Sep 23, 2026·

  ·
  2

• Add advisory decompress

  #3228·muhammad-hassnain opened Sep 19, 2026·

  ·
  1

• Mark chrono and friends as unmaintained

  #3214·djc opened Sep 14, 2026·

  ·
  6

• Add informational unsoundness advisory for burn-ndarray (UnsafeSharedRef aliasing UB)

  #3210·dywzju09-blip opened Sep 13, 2026·

  ·
  1

• Add information about GHSA-f42v-x7gq-phc8

  #3190·alexanderkjall opened Aug 31, 2026·

  ·
  2

• Add unmaintained advisory for lasso

  #3181·odilf opened Aug 28, 2026·

  ·
  3

• Add advisory for physis_pro: remote error body can permanently disable a shared LLM provider

  #3175·ilPez00 opened Aug 26, 2026·

  ·
  1

• Add unmaintained advisory for color-thief

  #3168·hey-jj opened Aug 22, 2026·

  ·
  2

• Add advisory for simd-json uncontrolled recursion during Value materialization

  #3167·dngen opened Aug 21, 2026·

  ·
  6

• Add advisory for bip322

  #3150·raphjaph opened Aug 14, 2026·

  ·
  2

• Add advisory for tiberius: panics on hostile server input

  #3148·north-echo opened Aug 13, 2026·

  ·
  2

• Add advisory for kawa Transfer-Encoding request smuggling (fixed in 0.7.0)

  #3142·UncleJ4ck opened Aug 11, 2026·

  ·
  4

• Document withdrawal of dcrypt 2.0.0

  #3124·NoCentralHub opened Aug 9, 2026·

  ·
  1