Issues

• RUSTSEC-2026-0091: Out-of-bounds write or crash when transcoding component model strings

  ipvm-wg/homestar#704 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0087: Wasmtime segfault or unused out-of-sandbox load with f64x2.splat operator on Cranelift x86-64

  ipvm-wg/homestar#706 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0085: Panic when lifting flags component value

  ipvm-wg/homestar#705 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0086: Host data leakage with 64-bit tables and Winch

  ipvm-wg/homestar#703 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0094: Improperly masked return value from table.grow with Winch compiler backend

  ipvm-wg/homestar#702 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0093: Heap OOB read in component model UTF-16 to latin1+utf16 string transcoding

  ipvm-wg/homestar#701 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0088: Data leakage between pooling allocator instances

  ipvm-wg/homestar#700 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0096: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

  ipvm-wg/homestar#699 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0092: Panic when transcoding misaligned component model UTF-16 strings

  ipvm-wg/homestar#697 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0089: Host panic when Winch compiler executes table.fill

  ipvm-wg/homestar#698 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0095: Wasmtime with Winch compiler backend may allow a sandbox-escaping memory access

  ipvm-wg/homestar#696 · Filter by author github-actions opened on Apr 10, 2026

• RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

  ipvm-wg/homestar#694 · Filter by author github-actions opened on Mar 21, 2026

• RUSTSEC-2026-0049: CRLs not considered authorative by Distribution Point due to faulty matching logic

  ipvm-wg/homestar#695 · Filter by author github-actions opened on Mar 21, 2026

• RUSTSEC-2026-0020: Guest-controlled resource exhaustion in WASI implementations

  ipvm-wg/homestar#693 · Filter by author github-actions opened on Feb 25, 2026

• RUSTSEC-2026-0021: Panic adding excessive fields to a wasi:http/types.fields instance

  ipvm-wg/homestar#692 · Filter by author github-actions opened on Feb 25, 2026

• RUSTSEC-2026-0002: IterMut violates Stacked Borrows by invalidating internal pointer

  ipvm-wg/homestar#691 · Filter by author github-actions opened on Jan 8, 2026

• RUSTSEC-2025-0141: Bincode is unmaintained

  ipvm-wg/homestar#690 · Filter by author github-actions opened on Jan 8, 2026

• RUSTSEC-2024-0445: cap-primitives doesn't fully sandbox all the Windows device filenames

  ipvm-wg/homestar#689 · Filter by author github-actions opened on Dec 20, 2025

• RUSTSEC-2025-0134: rustls-pemfile is unmaintained

  ipvm-wg/homestar#688 · Filter by author github-actions opened on Dec 6, 2025

• RUSTSEC-2025-0134: rustls-pemfile is unmaintained

  ipvm-wg/homestar#687 · Filter by author github-actions opened on Dec 6, 2025

• RUSTSEC-2025-0118: Unsound API access to a WebAssembly shared linear memory

  ipvm-wg/homestar#686 · Filter by author github-actions opened on Nov 14, 2025

• RUSTSEC-2025-0069: daemonize is Unmaintained

  ipvm-wg/homestar#685 · Filter by author github-actions opened on Sep 16, 2025

• RUSTSEC-2025-0057: fxhash - no longer maintained

  ipvm-wg/homestar#684 · Filter by author github-actions opened on Sep 6, 2025

• RUSTSEC-2025-0056: adler crate is unmaintained, use adler2 instead

  ipvm-wg/homestar#683 · Filter by author github-actions opened on Sep 6, 2025

• RUSTSEC-2025-0046: Host panic with fd_renumber WASIp1 function

  ipvm-wg/homestar#682 · Filter by author github-actions opened on Jul 19, 2025