Issues

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  rust
  getsentry/sentry-cli#3440 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  getsentry/sentry-cli#3439 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  getsentry/sentry-cli#3438 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  rust
  getsentry/sentry-cli#3437 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  rust
  getsentry/sentry-cli#3436 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  getsentry/sentry-cli#3435 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  getsentry/sentry-cli#3434 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  getsentry/sentry-cli#3433 · Filter by author github-actions opened on Oct 19, 2026
  1

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  getsentry/sentry-cli#3416 · Filter by author github-actions opened on Sep 21, 2026
  1

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  getsentry/sentry-cli#3398 · Filter by author github-actions opened on Aug 24, 2026
  1

  

• RUSTSEC-2026-0253: Potential use-after-free due to lack of panic safety in LruCache::pop()

  rust
  getsentry/sentry-cli#3394 · Filter by author github-actions opened on Aug 17, 2026
  1

• RUSTSEC-2025-0119: number_prefix crate is unmaintained

  Task
  getsentry/sentry-cli#3319 · Filter by author github-actions opened on Jun 1, 2026
  1

• RUSTSEC-2025-0119: number_prefix crate is unmaintained

  CLITask
  getsentry/sentry-cli#2978 · Filter by author github-actions opened on Nov 24, 2025
  1