https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:23:01.960775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291913 EUVD-2026-291913 2026-10-03T01:23:02.126905+00:00 EUVD-2026-291913 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0810 fkie_cve-2026-0810 2026-10-03T01:23:02.126951+00:00

A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.

 https://cve.radiocsirt.org/vuln/ghsa-6mw6-mj76-grwc GHSA-6mw6-mj76-grwc — gix-date can create non-utf8 string with `TimeBuf::as_str` 2026-10-03T01:23:02.127000+00:00

Affected: crates.io: gix-date

The function `gix_date::parse::TimeBuf::as_str` can create an illegal string containing non-utf8 characters. This violates the safety invariant of `TimeBuf` and can lead to undefined behavior when consuming the string.

The bug can be prevented by adding `str::from_utf8` to the function `TimeBuf::write`.

 https://cve.radiocsirt.org/vuln/rustsec-2025-0140 RUSTSEC-2025-0140 — Non-utf8 String can be created with `TimeBuf::as_str` 2026-10-03T01:23:02.127041+00:00

Affected: crates.io: gix-date

The function `gix_date::parse::TimeBuf::as_str` can create an illegal string containing non-utf8 characters. This violates the safety invariant of `TimeBuf` and can lead to undefined behavior when consuming the string.

The bug can be prevented by adding `str::from_utf8` to the function `TimeBuf::write`.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-0810 UBUNTU-CVE-2026-0810 2026-10-03T01:23:02.127078+00:00

Affected: Ubuntu:24.04:LTS: rust-gix-date, Ubuntu:25.10: rust-gix-date, Ubuntu:26.04:LTS: rust-gix-date

A flaw was found in gix-date. The `gix_date::parse::TimeBuf::as_str` function can generate strings containing invalid non-UTF8 characters. This issue violates the internal safety invariants of the `TimeBuf` component, leading to undefined behavior when these malformed strings are subsequently processed. This could potentially result in application instability or other unforeseen consequences.