Debian Rust Security Tracker 🩺🦀
Open Advisories 18
Packages Needing Attention 80
Tracked Debian packages 214
Tracked advisories 710

Overall Package Status

Fully Patched (134) Affected (60) High Severity (20)

Open Advisories 18

Advisory Crate Patched Versions Debian Version Severity Packages Affected Patched:Affected Ratio
RUSTSEC-2026-0204 crossbeam-epoch >=0.9.20
 0.9.18-1+b1
 51
RUSTSEC-2026-0193 ammonia >=4.1.3
>=4.0.2, <4.1.0
>=3.3.2, <4.0.0
 4.1.3-1
 1
RUSTSEC-2026-0195 quick-xml >=0.41.0
 0.38.4-1+b1
 high 17
RUSTSEC-2026-0194 quick-xml >=0.41.0
 0.38.4-1+b1
 high 17
RUSTSEC-2026-0187 lopdf >=0.42.0
 0.34.0-2+b1
 high 3
RUSTSEC-2026-0177 pyo3 >=0.29.0
 0.28.2-1
 7
RUSTSEC-2026-0176 pyo3 >=0.29.0
 0.28.2-1
 7
RUSTSEC-2026-0154 russh >=0.60.3
 0.57.1-2
 high 1
RUSTSEC-2026-0153 russh-cryptovec >=0.60.3
 0.59.0-1
 high 1
RUSTSEC-2026-0119 hickory-proto >=0.26.1
 0.25.2-3
 7
RUSTSEC-2026-0118 hickory-proto 0.25.2-3
 6
RUSTSEC-2026-0106 hickory-recursor 0.25.2-3
 1
RUSTSEC-2026-0104 rustls-webpki >=0.103.13, <0.104.0-alpha.1
>=0.104.0-alpha.7
 0.103.13+ds-1
0.101.7-7
 6
RUSTSEC-2026-0099 rustls-webpki >=0.103.12, <0.104.0-alpha.1
>=0.104.0-alpha.6
 0.103.13+ds-1
0.101.7-7
 6
RUSTSEC-2026-0098 rustls-webpki >=0.103.12, <0.104.0-alpha.1
>=0.104.0-alpha.6
 0.103.13+ds-1
0.101.7-7
 6
RUSTSEC-2025-0140 gix-date >=0.12.0
 0.15.3-1
 2
RUSTSEC-2023-0071 rsa 0.9.10-1+b1
 medium 4
RUSTSEC-2023-0066 pleaser 0.5.6-2+b2
 medium 2

Affected Packages 80

Package Version Advisories
b3sum 1.8.2-1+b2 crossbeam-epoch (RUSTSEC-2026-0204)
bacon 3.19.0+dfsg-1 crossbeam-epoch (RUSTSEC-2026-0204)
bandwhich 0.23.1-1 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
hickory-proto (RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465)
bat 0.26.1+dfsg-2+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
bmap-rs 0.2.2-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
broot 1.57.0+dfsg-3 crossbeam-epoch (RUSTSEC-2026-0204)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
cargo-audit 0.22.2-1 crossbeam-epoch (RUSTSEC-2026-0204)
cargo-c 0.10.16-2+b1 crossbeam-epoch (RUSTSEC-2026-0204)
gix-date (RUSTSEC-2025-0140, CVE-2026-0810, GHSA-6mw6-mj76-grwc)
cargo-edit 0.13.10-1 crossbeam-epoch (RUSTSEC-2026-0204)
cargo-machete 0.9.2-1 crossbeam-epoch (RUSTSEC-2026-0204)
cargo-mutants 27.0.0-1+b1 crossbeam-epoch (RUSTSEC-2026-0204)
cargo-outdated 0.19.0-1+b1 crossbeam-epoch (RUSTSEC-2026-0204)
gix-date (RUSTSEC-2025-0140, CVE-2026-0810, GHSA-6mw6-mj76-grwc)
czkawka-cli 11.0.1-1+b2 crossbeam-epoch (RUSTSEC-2026-0204)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
lopdf (high, RUSTSEC-2026-0187)
czkawka-gui 11.0.1-3 crossbeam-epoch (RUSTSEC-2026-0204)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
lopdf (high, RUSTSEC-2026-0187)
debcargo 2.8.3-2 crossbeam-epoch (RUSTSEC-2026-0204)
debian-lsp 0.1.8-2 crossbeam-epoch (RUSTSEC-2026-0204)
diskonaut 0.13.2-3 crossbeam-epoch (RUSTSEC-2026-0204)
diskus 0.9.0-1 crossbeam-epoch (RUSTSEC-2026-0204)
doxx 0.1.4+dfsg-1 crossbeam-epoch (RUSTSEC-2026-0204)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
dtui 3.0.0-3 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
du-dust 1.2.4-5 crossbeam-epoch (RUSTSEC-2026-0204)
dysk 3.6.1-2 crossbeam-epoch (RUSTSEC-2026-0204)
eza 0.23.4-2 crossbeam-epoch (RUSTSEC-2026-0204)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
fd-find 10.4.2-1 crossbeam-epoch (RUSTSEC-2026-0204)
feluda 1.11.1-2 crossbeam-epoch (RUSTSEC-2026-0204)
gnome-podcasts 25.3+dfsg-2+b1 crossbeam-epoch (RUSTSEC-2026-0204)
ammonia (RUSTSEC-2026-0193, GHSA-9jh8-v38h-cvhr, CVE-2026-63430)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
gpg-sq 0.13.1-13 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
hickory-proto (RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465)
gpgv-sq 0.13.1-13 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
hickory-proto (RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465)
grcov 0.10.7-1 crossbeam-epoch (RUSTSEC-2026-0204)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
gst-video-thumbnailer 1.1~alpha-1 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-dns 0.25.2-3 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
hickory-proto (RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465)
hypothesis-client 0.12.0-4+b2 rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
inquest 0.3.2-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
jql 8.1.2-1 crossbeam-epoch (RUSTSEC-2026-0204)
just 1.55.1-1 crossbeam-epoch (RUSTSEC-2026-0204)
librust-crossbeam-epoch-dev 0.9.18-1+b1 crossbeam-epoch (RUSTSEC-2026-0204)
librust-hickory-proto-dev 0.25.2-3 hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
hickory-proto (RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465)
librust-hickory-recursor-dev 0.25.2-3 hickory-recursor (RUSTSEC-2026-0106)
librust-lopdf-dev 0.34.0-2+b1 lopdf (high, RUSTSEC-2026-0187)
librust-pleaser-dev 0.5.6-2+b2 pleaser (medium, RUSTSEC-2023-0066, CVE-2023-46277, GHSA-cgf8-h3fp-h956)
librust-pyo3-dev 0.28.2-1 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
librust-quick-xml-dev 0.38.4-1+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
librust-rsa-dev 0.9.10-1+b1 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
librust-russh-cryptovec-dev 0.59.0-1 russh-cryptovec (high, RUSTSEC-2026-0153, CVE-2026-46673, GHSA-g9f8-wqj9-fjw5)
librust-russh-dev 0.57.1-2 russh (high, RUSTSEC-2026-0154, CVE-2026-46673, GHSA-g9f8-wqj9-fjw5)
librust-rustls-webpki-0.101-dev 0.101.7-7 rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
loggerhead 3.0.1+dfsg-2+b2 crossbeam-epoch (RUSTSEC-2026-0204)
pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
nanopub 0.2.0+ds-1.1+b1 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
nethsm-pkcs11 2.0.0-2+b2 crossbeam-epoch (RUSTSEC-2026-0204)
rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
numbat 1.11.0-5+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
ognibuild 0.2.15-1+b1 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
photodedupe 1.0.6-2 crossbeam-epoch (RUSTSEC-2026-0204)
pleaser 0.5.6-2+b2 pleaser (medium, RUSTSEC-2023-0066, CVE-2023-46277, GHSA-cgf8-h3fp-h956)
presenterm 0.16.1+dfsg-2 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
python3-pendulum 3.2.0-1+b1 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
python3-pydantic-core 2.46.4-2 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
python3-taskchampion-py 2.0.2-4+b1 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
rav1e 0.8.1-10 crossbeam-epoch (RUSTSEC-2026-0204)
rbase64 2.0.3-2 crossbeam-epoch (RUSTSEC-2026-0204)
rbw 1.15.0-1 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
ripgrep 15.1.0-1+b1 crossbeam-epoch (RUSTSEC-2026-0204)
rockusb 0.2.0-3+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
rpacket 0.1.4-1+b5 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
rust-i18n-cli 4.1.0-1 crossbeam-epoch (RUSTSEC-2026-0204)
sd 1.0.0-4+b2 crossbeam-epoch (RUSTSEC-2026-0204)
sdml 0.3.2+20250310-7+b1 crossbeam-epoch (RUSTSEC-2026-0204)
sequoia-git 0.6.0-1+b1 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
settle 0.40.1-9+b2 crossbeam-epoch (RUSTSEC-2026-0204)
silver-platter 0.8.4-2 crossbeam-epoch (RUSTSEC-2026-0204)
pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
so 0.4.10-3 crossbeam-epoch (RUSTSEC-2026-0204)
sq 1.3.1-11 crossbeam-epoch (RUSTSEC-2026-0204)
hickory-proto (RUSTSEC-2026-0119, GHSA-q2qq-hmj6-3wpp)
hickory-proto (RUSTSEC-2026-0118, GHSA-3v94-mw7p-v465)
sqop 0.37.3-1+b2 crossbeam-epoch (RUSTSEC-2026-0204)
subtile-ocr 0.2.6+ds-2+b1 crossbeam-epoch (RUSTSEC-2026-0204)
tealdeer 1.8.1-1+b1 rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
texlab 5.25.1-2+b1 crossbeam-epoch (RUSTSEC-2026-0204)
tokei 13.0.0-4 crossbeam-epoch (RUSTSEC-2026-0204)
vtracer 0.6.5-1 crossbeam-epoch (RUSTSEC-2026-0204)
wasm-bindgen 0.2.108+ds-2+b1 crossbeam-epoch (RUSTSEC-2026-0204)
rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
xh 0.26.1-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
xleak 0.2.6+dfsg-1+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)