https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:49:59 +0000 https://cve.radiocsirt.org/vuln/ghsa-w7hm-hmxv-pvhf <p><strong>Affected:</strong> crates.io: hpack</p> <p>Due to insufficient checking of input data, decoding certain data sequences can lead to _Decoder::decode_ panicking rather than returning an error.</p> <p>Example code that triggers this vulnerability looks like this:</p> <p>```rust use hpack::Decoder;</p> <p>pub fn main() { let input = &amp;[0x3f]; let mut decoder = Decoder::new(); let _ = decoder.decode(input); } ```</p> <p>hpack is unmaintained. A crate with the panics fixed has been published as [hpack-patched](https://crates.io/crates/hpack-patched).</p> <p>Also consider using [fluke-hpack](https://crates.io/crates/fluke-hpack) or [httlib-huffman](https://crates.io/crates/httlib-huffman) as an alternative.</p> <p><strong>Affected:</strong> crates.io: hpack</p> <p>Due to insufficient checking of input data, decoding certain data sequences can lead to _Decoder::decode_ panicking rather than returning an error.</p> <p>Example code that triggers this vulnerability looks like this:</p> <p>```rust use hpack::Decoder;</p> <p>pub fn main() { let input = &amp;[0x3f]; let mut decoder = Decoder::new(); let _ = decoder.decode(input); } ```</p> <p>hpack is unmaintained. A crate with the panics fixed has been published as [hpack-patched](https://crates.io/crates/hpack-patched).</p> <p>Also consider using [fluke-hpack](https://crates.io/crates/fluke-hpack) or [httlib-huffman](https://crates.io/crates/httlib-huffman) as an alternative.</p> https://cve.radiocsirt.org/vuln/ghsa-w7hm-hmxv-pvhf