RustSec @RustSec

Security advisory database for Rust crates published through https://t.co/NctFWNHsjG. A project of the @rustsecurecode working group. rustsec.org Joined January 2017

Tweets

148
Followers

2K
Following

17
Likes

44

GitHub @github

3 years ago

Rust is the fastest growing language on GitHub, and GitHub’s supply chain security features now help keep your Rust projects secure 🔒 github.co/3tiGH9E

5 93 303 0 24

llogiq @llogiq

3 years ago

blog.logrocket.com/comparing-rust… Comparing Rust supply chain safety tools

2 18 41 0 11

Rust Language @rustlang

3 years ago

A malicious crate was uploaded to crates.io, targeting GitLab CI environments. Read more on the security advisory: blog.rust-lang.org/2022/05/10/mal…

3 161 331 0 23

The regex crate is vulnerable to denial of service attacks when parsing untrusted regexes (CVE-2022-24713). We released version 1.5.5, fixing the issue. Read the advisory: blog.rust-lang.org/2022/03/08/cve…

2 73 233 0 6

Rust Language @rustlang

4 years ago

The std::fs::remove_dir_all function in the Rust standard library is vulnerable to a race condition (CVE-2022-21658). We will release Rust 1.58.1 with the fix later today. Read the advisory: blog.rust-lang.org/2022/01/20/cve…

0 89 328 0 8

RustSec @RustSec

4 years ago

This is the first year that we've ever seen fewer advisories filed than the previous year! One reason why is because the bulk of advisories for vulnerabilities discovered by the Rudra static code analyzer were filed in 2020

Yechan Bae @yechan_bae

4 years ago

1 11 89 0 5

Download Image

0 3 10 0 0

Rust Language @rustlang

4 years ago

We have a security advisory for rustc today: blog.rust-lang.org/2021/11/01/cve… We will have a 1.56.1 release out soon.

4 112 401 0 13

RustSec @RustSec

4 years ago

The rustsec.org web site now features severity information for each security advisory

0 4 16 0 2

Download Image

RustSec @RustSec

4 years ago

Unfortunately we don’t have clear guidance for what to do. It impacts several major ecosystem crates including `chrono`. For the latest information, see the upstream issue on `time`: github.com/time-rs/time/i…

2 0 26 0 0

RustSec @RustSec

4 years ago

This isn’t a false positive, but rather a case where the advisory has been updated to include earlier versions of the `time` crate. Unfortunately the fix is only in `time` v0.2, and it’s unclear if it can be backported to v0.1 due to API constraints.

1 0 11 0 0

RustSec @RustSec

4 years ago

Heads up Rustsceans! You might have recently gotten a security vulnerability notification for RUSTSEC-2020-0071: a potential segfault impacting `time` v0.1 (cont’d) rustsec.org/advisories/RUS…

1 4 24 0 3

Kate Catlin @Kate_Catlin

4 years ago

My team's first release since I joined GitHub is out today, and my first GitHub blog is live! Thanks so much to the @RustSec community for collaborating to bring curated Rust security advisories to the GitHub Advisory Database! github.blog/2021-09-23-git…

0 17 83 0 4

RustSec @RustSec

5 years ago

Why so much @RustSec growth in 2020? Part of it is more @rustlang adoption and a growing ecosystem. 2020 also saw more Rust security/vulnerability research including hardening efforts like Safety Dance as well as growth in academic security research. github.com/rust-secure-co…

1 6 35 0 1

RustSec @RustSec

5 years ago

Growth in the @RustSec security advisory database year-over-year throughout its 5-year history

1 1 14 0 0

Download Image

RustSec @RustSec

5 years ago

Introducing `auditable`: audit compiled @rustlang binaries against security advisories in the @RustSec database: reddit.com/r/rust/comment…

2 11 16 0 0

RustSec @RustSec

5 years ago

RUSTSEC-2020-0036: failure is officially deprecated/unmaintained rustsec.org/advisories/RUS…

0 3 7 0 0

Rust Language @rustlang

5 years ago

The Rust team was notified of a vulnerability affecting crates.io API tokens generation and storage, and out of aboundance of precaution we revoked all existing tokens. Learn more on the advisory: blog.rust-lang.org/2020/07/14/cra…

7 106 259 0 4

RustSec @RustSec

5 years ago

We've posted a retrospective on RUSTSEC advisories filed in April 2020: - rusqlite - os_str_bytes - flatbuffers - fake-static - plutonium reddit.com/r/rust/comment…