https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:08:04.416773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-30438 cnvd-2021-30438 2026-10-12T23:08:04.420395+00:00 cnvd-2021-30438 https://cve.radiocsirt.org/vuln/euvd-2026-47842 EUVD-2026-47842 2026-10-12T23:08:04.420424+00:00 EUVD-2026-47842 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35858 fkie_cve-2020-35858 2026-10-12T23:08:04.420438+00:00

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM).

 https://cve.radiocsirt.org/vuln/ghsa-gv73-9mwv-fwgq GHSA-gv73-9mwv-fwgq — Out of bounds write in prost 2026-10-12T23:08:04.420465+00:00

Affected: crates.io: prost

Affected versions of this crate contained a bug in which decoding untrusted input could overflow the stack. On architectures with stack probes (like x86), this can be used for denial of service attacks, while on architectures without stack probes (like ARM) overflowing the stack is unsound and can result in potential memory corruption (or even RCE).

 https://cve.radiocsirt.org/vuln/gsd-2020-35858 gsd-2020-35858 2026-10-12T23:08:04.420489+00:00 gsd-2020-35858 https://cve.radiocsirt.org/vuln/rustsec-2020-0002 RUSTSEC-2020-0002 — Parsing a specially crafted message can result in a stack overflow 2026-10-12T23:08:04.420500+00:00

Affected: crates.io: prost

Affected versions of this crate contained a bug in which decoding untrusted input could overflow the stack.

On architectures with stack probes (like x86), this can be used for denial of service attacks, while on architectures without stack probes (like ARM) overflowing the stack is unsound and can result in potential memory corruption (or even RCE). The flaw was quickly corrected by [@danburkert](https://github.com/danburkert) and released in version 0.6.1.