rust-zstd-safe-7

Rust crate "zstd-safe"

Current: 7.2.4
Candidate: 7.4.0Stale
Release line: 7.x

License: MIT OR Apache-2.0

Build

Target	Result	Last successful version	Succeeded at
rva23	Succeeded	7.2.4	2026-09-21 19:39:46 UTC
rva20	Succeeded	7.2.4	2026-09-21 18:10:27 UTC
x86_64	Succeeded	7.2.4	2026-09-21 17:54:27 UTC

LicenseDiff · 1

Target: 7.4.0

MIT OR Apache-2.0 → BSD-3-Clause
License · 7.2.4
MIT OR Apache-2.0crates.io
License · 7.4.0
BSD-3-Clausecrates.io

Advisory · 12

Query ecosystem: crates.ioOSV
Query name: zstd-safeOSV
Query version: 7.2.4OSV

Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.

RUSTSEC-2026-0395
OSV
Summary
Use-after-free with `CParameter::StableInBuffer`OSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 53a8a290d8cf Web · github.com
RUSTSEC-2026-0396
OSV
Summary
`Seekable` reads a NULL or out-of-bounds seek tableOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · a9626069d6f2 Web · github.com
RUSTSEC-2026-0397
OSV
Summary
`OutBuffer::around_pos` exposes uninitialized memoryOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 5827de2459b8 Web · github.com
RUSTSEC-2026-0398
OSV
Summary
`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the endOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 80506be743fa Web · github.com
RUSTSEC-2026-0399
OSV
Summary
Use-after-free through `init_using_cdict` and `init_using_ddict`OSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · e00e7928e3e9 Web · github.com
RUSTSEC-2026-0400
OSV
Summary
Use-after-free of a dictionary after a one-shot call on a context with an open streamOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · d34502a0ed07 Web · github.com
RUSTSEC-2026-0401
OSV
Summary
Out-of-bounds read in `train_from_buffer` when sample sizes overflowOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 781ea454191d Web · github.com
RUSTSEC-2026-0402
OSV
Summary
Heap buffer overflow in `CCtx::try_clone` on a multithreaded contextOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 682b8b2967cf Web · github.com
RUSTSEC-2026-0403
OSV
Summary
Uninitialized memory exposed when streaming decompression of a legacy frame failsOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 006e1d1ad1ee Web · github.com
RUSTSEC-2026-0404
OSV
Summary
Double free in `DCtx::try_clone`OSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · cee6529b553e Web · github.com
RUSTSEC-2026-0405
OSV
Summary
Out-of-bounds read with an out-of-range `InBuffer::pos`OSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · 20d397c0d68d Web · github.com
RUSTSEC-2026-0406
OSV
Summary
Use-after-free when changing a multithreaded context with an unfinished frameOSV
Fixed events
7.4.0, 8.2.0OSV
Aliases
—OSV
EPSS (no CVE alias)
not applicableFIRST
KEV (no CVE alias)
not applicableCISA
References
Advisory · rustsec.org Web · e224018a2389 Web · github.com

Description

Source code for takopackized Rust crate "zstd-safe"

Changelog

SPECS: Regenerate Rust crate providers with normalized manifests.
yyjeqhcce0c963108de2026-06-17 03:51:50 UTC

PR · 1

#739 SPECS: Regenerate Rust crate providers with normalized manifests.
yyjeqhc2026-06-17 17:42:21 UTC

Checks

Monitor	Observation	Last checked
Source	Stale Repository refresh: git fetch exited 128 (authentication)	2026-11-12 12:09:42 UTC
Version	Stale Source last confirmed at 2026-11-12T12:09:42+00:00; repository refresh overdue.	2026-11-12 11:42:42 UTC
Build	Checked	2026-11-12 12:57:02 UTC
GitHub	Checked	2026-11-12 12:52:29 UTC
EOL	Not configured No reliable monitor identity/configuration.	—
LicenseDiff	Checked Compared same-provider, same-project SPDX metadata for this version pair.	2026-11-12 02:38:23 UTC Last attempted2026-11-12 05:33:02 UTC
Dependencies	Checked	2026-11-12 02:38:23 UTC Last attempted2026-11-12 05:33:02 UTC
Advisory	Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated.	2026-11-12 08:48:05 UTC
Yanked	Checked	2026-11-12 08:40:08 UTC

Monitor	Checks
Source	6380 Stale 17 CheckFailed
Version	5432 Stale 237 CheckFailed 720 Not configured 8 Input unavailable
Build	6392 Checked 5 Not yet checked
GitHub	6397 Checked
EOL	6273 Not configured 118 Checked 3 Metadata unavailable 3 Input unavailable
LicenseDiff	1672 Not configured 187 Input changed 3175 Not applicable 12 Input unavailable 1136 Checked 211 Metadata unavailable 4 CheckFailed
Dependencies	1859 Not configured 3220 Checked 1248 Metadata unavailable 7 Input unavailable 58 Partial evidence 5 CheckFailed
Advisory	5008 Checked 1376 Not configured 7 Input unavailable 6 Metadata unavailable
Yanked	2255 Not configured 4122 Checked 5 CheckFailed 7 Input unavailable 8 Metadata unavailable