Search results

RUSTSEC-2026-0087: Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator on Cranelift x86-64

Status: Open.

#2242 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0085: Panic when lifting flags component value

Status: Open.

#2241 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0086: Host data leakage with 64-bit tables and Winch

Status: Open.

#2239 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0091: Out-of-bounds write or crash when transcoding component model strings

Status: Open.

#2240 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0093: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding

Status: Open.

#2237 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0094: Improperly masked return value from table.grow with Winch compiler backend

Status: Open.

#2238 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0088: Data leakage between pooling allocator instances

Status: Open.

#2236 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0089: Host panic when Winch compiler executes table.fill

Status: Open.

#2234 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0096: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

Status: Open.

#2235 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0092: Panic when transcoding misaligned component model UTF-16 strings

Status: Open.

#2233 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

RUSTSEC-2026-0095: Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access

Status: Open.

#2232 In paritytech/smoldot-archive;

· github-actions opened on Apr 10, 2026

Bitswap protocol support & RPC endpoint

Status: Open.

#2220 In paritytech/smoldot-archive;

· dmitry-markin opened on Mar 6, 2026