Issues

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  lame13/crawlcontract#10 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  lame13/crawlcontract#9 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  lame13/crawlcontract#8 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  lame13/crawlcontract#7 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  lame13/crawlcontract#6 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  lame13/crawlcontract#4 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  lame13/crawlcontract#5 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  lame13/crawlcontract#3 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0341: Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

  lame13/crawlcontract#2 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2025-0057: fxhash - no longer maintained

  lame13/crawlcontract#1 · Filter by author github-actions opened on Oct 5, 2026