Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  elision-labs/queueflow-core#30 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  elision-labs/queueflow-core#29 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  elision-labs/queueflow-core#28 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  elision-labs/queueflow-core#27 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0385: Non-constant-time mask generation and u128 comparisons

  elision-labs/queueflow-core#26 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  elision-labs/queueflow-core#25 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  elision-labs/queueflow-core#23 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  elision-labs/queueflow-core#22 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  elision-labs/queueflow-core#21 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  elision-labs/queueflow-core#20 · Filter by author github-actions opened on Oct 19, 2026