Issues

• RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream

  bitcoindevkit/electrum_streaming_client#69 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0401: Out-of-bounds read in train_from_buffer when sample sizes overflow

  bitcoindevkit/electrum_streaming_client#67 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict

  bitcoindevkit/electrum_streaming_client#68 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame

  bitcoindevkit/electrum_streaming_client#65 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0402: Heap buffer overflow in CCtx::try_clone on a multithreaded context

  bitcoindevkit/electrum_streaming_client#66 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0404: Double free in DCtx::try_clone

  bitcoindevkit/electrum_streaming_client#64 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0395: Use-after-free with CParameter::StableInBuffer

  bitcoindevkit/electrum_streaming_client#62 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0397: OutBuffer::around_pos exposes uninitialized memory

  bitcoindevkit/electrum_streaming_client#63 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0410: WebAssembly allocator shim corrupts memory on allocation failure

  bitcoindevkit/electrum_streaming_client#61 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  bitcoindevkit/electrum_streaming_client#60 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  bitcoindevkit/electrum_streaming_client#57 · Filter by author github-actions opened on Oct 24, 2026

• ReadStreamer panics when the stream ends mid-line

  bitcoindevkit/electrum_streaming_client#56 · Filter by author evanlinjin opened on Oct 22, 2026

• RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

  bitcoindevkit/electrum_streaming_client#55 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot

  bitcoindevkit/electrum_streaming_client#54 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0190: Unsoundness in Error::downcast_mut()

  bitcoindevkit/electrum_streaming_client#53 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2025-0052: async-std has been discontinued

  bitcoindevkit/electrum_streaming_client#52 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  bitcoindevkit/electrum_streaming_client#51 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  bitcoindevkit/electrum_streaming_client#50 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  bitcoindevkit/electrum_streaming_client#49 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  bitcoindevkit/electrum_streaming_client#48 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0009: Denial of Service via Stack Exhaustion

  bitcoindevkit/electrum_streaming_client#47 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0067: unpack_in can chmod arbitrary directories by following symlinks

  bitcoindevkit/electrum_streaming_client#45 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0068: tar-rs incorrectly ignores PAX size headers if header size is nonzero

  bitcoindevkit/electrum_streaming_client#46 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name

  bitcoindevkit/electrum_streaming_client#44 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0104: Reachable panic in certificate revocation list parsing

  bitcoindevkit/electrum_streaming_client#43 · Filter by author github-actions opened on Oct 21, 2026