https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T07:28:56.042083+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35876 CVE-2020-35876 2026-10-09T07:28:56.079630+00:00

An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.

 https://cve.radiocsirt.org/vuln/rustsec-2020-0021 RUSTSEC-2020-0021 — rio allows a use-after-free buffer access when a future is leaked 2026-10-09T07:28:56.079696+00:00

Affected: crates.io: rio

When a `rio::Completion` is leaked, its drop code will not run. The drop code is responsible for waiting until the kernel completes the I/O operation into, or out of, the buffer borrowed by `rio::Completion`. Leaking the struct will allow one to access and/or drop the buffer, which can lead to a use-after-free, data races or leaking secrets.

Upstream is not interested in fixing the issue.