Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  tumpaproject/tumpa-cli#70 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  tumpaproject/tumpa-cli#69 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  tumpaproject/tumpa-cli#68 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  tumpaproject/tumpa-cli#67 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0372: zvariant_derive is unmaintained

  tumpaproject/tumpa-cli#66 · Filter by author github-actions opened on Oct 18, 2026

• RUSTSEC-2026-0370: zvariant is unmaintained

  tumpaproject/tumpa-cli#65 · Filter by author github-actions opened on Oct 18, 2026

• RUSTSEC-2026-0371: zbus_names is unmaintained

  tumpaproject/tumpa-cli#64 · Filter by author github-actions opened on Oct 18, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  tumpaproject/tumpa-cli#63 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  tumpaproject/tumpa-cli#62 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  tumpaproject/tumpa-cli#61 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  tumpaproject/tumpa-cli#60 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  tumpaproject/tumpa-cli#59 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  tumpaproject/tumpa-cli#58 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  tumpaproject/tumpa-cli#57 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0341: Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

  tumpaproject/tumpa-cli#56 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  tumpaproject/tumpa-cli#54 · Filter by author github-actions opened on Sep 15, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  tumpaproject/tumpa-cli#50 · Filter by author github-actions opened on Aug 19, 2026

• RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot

  tumpaproject/tumpa-cli#49 · Filter by author github-actions opened on Aug 1, 2026

• RUSTSEC-2026-0173: proc-macro-error2 is unmaintained

  tumpaproject/tumpa-cli#43 · Filter by author github-actions opened on Jul 2, 2026

• RUSTSEC-2026-0195: Unbounded namespace-declaration allocation in NsReader enables memory-exhaustion denial of service

  tumpaproject/tumpa-cli#42 · Filter by author github-actions opened on Jul 2, 2026

• Allow simple ways to restart mac agent

  enhancement
  tumpaproject/tumpa-cli#33 · Filter by author kushaldas opened on Jun 4, 2026
  1