Search results

RUSTSEC-2025-0023: Broadcast channel calls clone in parallel, but does not require Sync

Status: Open.

#97 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2025-0134: rustls-pemfile is unmaintained

Status: Open.

#95 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

Status: Open.

#96 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2026-0098: Name constraints for URI names were incorrectly accepted

Status: Open.

#92 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2026-0104: Reachable panic in certificate revocation list parsing

Status: Open.

#93 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2026-0049: CRLs not considered authoritative by Distribution Point due to faulty matching logic

Status: Open.

#94 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2025-0009: Some AES functions may panic when overflow checking is enabled.

Status: Open.

#90 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2026-0099: Name constraints were accepted for certificates asserting a wildcard name

Status: Open.

#91 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2025-0004: ssl::select_next_proto use after free

Status: Open.

#88 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2025-0022: Use-After-Free in Md::fetch and Cipher::fetch

Status: Open.

#89 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

RUSTSEC-2026-0007: Integer overflow in BytesMut::reserve

Status: Open.

#87 In huggingface/hf_transfer;

· github-actions opened on May 27, 2026

The caculation of the range stop may be incorrect in the function download_async

Status: Open.

#65 In huggingface/hf_transfer;

· jstzwj opened on Mar 6, 2025