https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:18:14.350693+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35858 CVE-2020-35858 2026-10-13T08:18:14.367937+00:00

An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM).

 https://cve.radiocsirt.org/vuln/ghsa-gv73-9mwv-fwgq GHSA-gv73-9mwv-fwgq — Out of bounds write in prost 2026-10-13T08:18:14.367987+00:00

Affected: crates.io: prost

Affected versions of this crate contained a bug in which decoding untrusted input could overflow the stack. On architectures with stack probes (like x86), this can be used for denial of service attacks, while on architectures without stack probes (like ARM) overflowing the stack is unsound and can result in potential memory corruption (or even RCE).