Repository navigation

Issues

RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety
shellinea/qingjian-android#21 · opened on Oct 26, 2026
RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates
shellinea/qingjian-android#20 · opened on Oct 26, 2026
RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates
shellinea/qingjian-android#19 · opened on Oct 26, 2026
RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory
shellinea/qingjian-android#17 · opened on Oct 19, 2026
RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation
shellinea/qingjian-android#16 · opened on Oct 19, 2026
RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target
shellinea/qingjian-android#15 · opened on Oct 19, 2026
RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets
shellinea/qingjian-android#14 · opened on Oct 19, 2026
RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange
shellinea/qingjian-android#13 · opened on Oct 19, 2026
RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication
shellinea/qingjian-android#12 · opened on Oct 19, 2026
RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection
shellinea/qingjian-android#11 · opened on Oct 19, 2026
RUSTSEC-2026-0192: ttf-parser is unmaintained
shellinea/qingjian-android#5 · opened on Oct 5, 2026