https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:32:17.082990+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-47857 EUVD-2026-47857 2026-10-06T22:32:17.088260+00:00 EUVD-2026-47857 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35875 fkie_cve-2020-35875 2026-10-06T22:32:17.088293+00:00

An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly.

 https://cve.radiocsirt.org/vuln/ghsa-2jfv-g3fh-xq3v GHSA-2jfv-g3fh-xq3v — Excessive memory usage in tokio-rustls 2026-10-06T22:32:17.088323+00:00

Affected: crates.io: tokio-rustls

tokio-rustls does not call process_new_packets immediately after read, so the expected termination condition wants_read always returns true. As long as new incoming data arrives faster than it is processed and the reader does not return pending, data will be buffered. This may cause DoS.

 https://cve.radiocsirt.org/vuln/gsd-2020-35875 gsd-2020-35875 2026-10-06T22:32:17.088348+00:00 gsd-2020-35875 https://cve.radiocsirt.org/vuln/rustsec-2020-0019 RUSTSEC-2020-0019 — tokio-rustls reads may cause excessive memory usage 2026-10-06T22:32:17.088360+00:00

Affected: crates.io: tokio-rustls

`tokio-rustls` does not call `process_new_packets` immediately after `read`, so the expected termination condition `wants_read` always returns true. As long as new incoming data arrives faster than it is processed and the reader does not return pending, data will be buffered.

This may cause DoS.