Hacker GitHub

← All repos

rustsec/advisory-db

View on GitHub ↗ ★ 1,196

Security advisory database for Rust crates published through crates.io

13 mentions on Hacker News by 12 people: 5 stories, 8 comments · first 2017-05-05 · latest 2026-08-20

Mentions per year 13 mentions · busiest year 2026 (6)
20082026
AllStoriesComments NewestTopOldest
  1. …link but that's also broken https://web.archive.org/web/20260820150747/https://crates.io... ) [4]: https://github.com/rustsec/advisory-db/issues/3161#issuecomm...
    comment by cube00 · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload
  2. …Direct post link: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on... Initial report: https://github.com/rustsec/advisory-db/issues/3161 Other vendor posts: * https://www.stepsecurity.io/blog/arrayref-rust-crate-supply-... *…
    comment by ramimac · 2026-08-20 · in Malicious Rust crate Arrayref runs a build-time payload
  3. ▲ 554
    Malicious Rust crate Arrayref runs a build-time payload
    story by abhisek · 2026-08-20 · 511 comments
  4. ▲ 3
    Rust arrayref 0.3.10 crate installs malware
    story by jedisct1 · 2026-08-20 · 0 comments
  5. ▲ 2
    Arrayref v0.3.10 and v0.3.11 compromised on crates.io
    story by stevefan1999 · 2026-08-20 · 0 comments
  6. …the new Rust "ls": ubuntu@resolute:~$ cargo audit bin /usr/bin/ls Fetching advisory database from `https://github.com/RustSec/advisory-db.git` Loaded 1107 security advisories (from /home/ubuntu/.cargo/advisory-db) Updating crates.io index…
    comment by thesuperbigfrog · 2026-06-04 · in Cargo-Auditable Support on Ubuntu
  7. For Rust, the advisory database cargo-audit uses ( https://github.com/RustSec/advisory-db/ ) does track which functions are affected by a cve (if provided). I'm not sure if the tool uses them though.
    comment by dwattttt · 2025-05-12 · in Demonstrably Secure Software Supply Chains with Nix
  8. Related thread: * https://github.com/rustsec/advisory-db/issues/1921 * https://twitter.com/mitsuhiko/status/1772576163371655263
    comment by tison · 2024-03-26 · in Serde-YAML for Rust has been archived
  9. …[2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3116... [3] https://github.com/rustsec/advisory-db/blob/main/crates/cros... [4] https://github.com/rustsec/advisory-db/blob/main/crates/toki... [5] https://github.com/rus
    comment by kprotty · 2023-03-07 · in Zig as an alternative to writing unsafe Rust
  10. Hyper 0.11.26 - https://crates.io/crates/hyper/0.11.26 Not yanked. Vulnerable to https://github.com/RustSec/advisory-db/blob/main/crates/hype...
    comment by richardwhiuk · 2021-04-20 · in Preparing Rustls for Wider Adoption
  11. ▲ 1
    RustSec Advisory Database
    story by based2 · 2021-02-16 · 0 comments
  12. ▲ 2
    RustSec Advisory Database
    story by based2 · 2021-01-16 · 0 comments
  13. …an integer overflow outside the unsafe block[1]. The unsafe code itself was written correctly. [1] https://github.com/RustSec/advisory-db/blob/master/crates/ba...
    comment by agwa · 2017-05-05 · in The Rust Libs Blitz