Debian Rust Security Tracker 🩺🦀
Open Advisories 16
Packages Needing Attention 53
Tracked Debian packages 215
Tracked advisories 754

Overall Package Status

Fully Patched (162) Affected (34) High Severity (19)

Open Advisories 16

Advisory Crate Patched Versions Debian Version Severity Packages Affected Patched:Affected Ratio
RUSTSEC-2026-0258 h2 >=0.4.16
 0.4.19-1
 20
RUSTSEC-2026-0257 webbrowser >=1.2.2
 1.0.5-1+b1
 3
RUSTSEC-2026-0204 crossbeam-epoch >=0.9.20
 0.9.20-1
 2
RUSTSEC-2026-0195 quick-xml >=0.41.0
 0.38.4-1+b1
 high 16
RUSTSEC-2026-0194 quick-xml >=0.41.0
 0.38.4-1+b1
 high 16
RUSTSEC-2026-0187 lopdf >=0.42.0
 0.34.0-2+b1
 high 3
RUSTSEC-2026-0177 pyo3 >=0.29.0
 0.28.2-2
 7
RUSTSEC-2026-0176 pyo3 >=0.29.0
 0.28.2-2
 7
RUSTSEC-2026-0154 russh >=0.60.3
 0.57.1-2
 high 1
RUSTSEC-2026-0153 russh-cryptovec >=0.60.3
 0.59.0-1
 high 1
RUSTSEC-2026-0106 hickory-recursor 0.25.2-6
 1
RUSTSEC-2026-0104 rustls-webpki >=0.103.13, <0.104.0-alpha.1
>=0.104.0-alpha.7
 0.103.13+ds-1
0.101.7-7
 3
RUSTSEC-2026-0099 rustls-webpki >=0.103.12, <0.104.0-alpha.1
>=0.104.0-alpha.6
 0.103.13+ds-1
0.101.7-7
 3
RUSTSEC-2026-0098 rustls-webpki >=0.103.12, <0.104.0-alpha.1
>=0.104.0-alpha.6
 0.103.13+ds-1
0.101.7-7
 3
RUSTSEC-2023-0071 rsa 0.9.10-1+b1
 medium 4
RUSTSEC-2023-0066 pleaser 0.5.6-2+b2
 medium 2

Affected Packages 53

Package Version Advisories
bat 0.26.1+ds-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
bmap-rs 0.2.2-1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
broot 1.57.0+ds-3 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
cargo-audit 0.22.2-1+b1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
cargo-edit 0.13.13-1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
czkawka-cli 12.0.1-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
lopdf (high, RUSTSEC-2026-0187)
czkawka-gui 12.0.1-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
lopdf (high, RUSTSEC-2026-0187)
debian-lsp 0.1.8-4 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
debian-repro-status 0.4.0-2 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
doxx 0.1.4+dfsg-1+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
drt-tools 0.3.5-3 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
eza 0.23.5-5 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
feluda 1.15.0-2 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
gpg-sq 0.13.1-14 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
gpgv-sq 0.13.1-14 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
grcov 0.10.7-1+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
hypothesis-client 0.12.0-4+b2 rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
ingredients 0.3.0-1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
inquest 0.3.5-1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
librust-hickory-recursor-dev 0.25.2-6 hickory-recursor (RUSTSEC-2026-0106)
librust-lopdf-dev 0.34.0-2+b1 lopdf (high, RUSTSEC-2026-0187)
librust-pleaser-dev 0.5.6-2+b2 pleaser (medium, RUSTSEC-2023-0066, CVE-2023-46277, GHSA-cgf8-h3fp-h956)
librust-pyo3-dev 0.28.2-2 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
librust-quick-xml-dev 0.38.4-1+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
librust-rsa-dev 0.9.10-1+b1 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
librust-russh-cryptovec-dev 0.59.0-1 russh-cryptovec (high, RUSTSEC-2026-0153, CVE-2026-46673, GHSA-g9f8-wqj9-fjw5)
librust-russh-dev 0.57.1-2 russh (high, RUSTSEC-2026-0154, CVE-2026-46673, GHSA-g9f8-wqj9-fjw5)
librust-rustls-webpki-0.101-dev 0.101.7-7 rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
librust-webbrowser-dev 1.0.5-1+b1 webbrowser (RUSTSEC-2026-0257, GHSA-2ph8-5cr8-hr33)
loggerhead 3.0.1+dfsg-2+b2 crossbeam-epoch (RUSTSEC-2026-0204)
pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
miniserve 0.35.0-4 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
nanopub 0.2.0+ds-1.1+b1 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
numbat 1.11.0-5+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
rustls-webpki (RUSTSEC-2026-0104, GHSA-82j2-j2ch-gfr8)
rustls-webpki (RUSTSEC-2026-0099, GHSA-xgp8-3hg3-c2mh)
rustls-webpki (RUSTSEC-2026-0098, GHSA-965h-392x-2mh5)
ognibuild 0.2.19-2 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
pleaser 0.5.6-2+b2 pleaser (medium, RUSTSEC-2023-0066, CVE-2023-46277, GHSA-cgf8-h3fp-h956)
presenterm 0.16.1+dfsg-2 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
python3-pendulum 3.2.0-2+b1 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
python3-pydantic-core 2.46.5-1+b1 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
python3-taskchampion-py 2.0.2-4+b2 pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
rbw 1.15.0-2 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
ripasso-cursive 0.8.0-1+b5 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
ripcalc 0.4.0-1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
rockusb 0.2.0-3+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
rpacket 0.1.5-2 rsa (medium, RUSTSEC-2023-0071, CVE-2023-49092, GHSA-c38w-74pg-36hr, GHSA-4grx-2x9w-596c)
samply 0.13.1-1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
sdml 0.3.2+20250310-7+b1 crossbeam-epoch (RUSTSEC-2026-0204)
sequoia-git 0.6.0-2 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
silver-platter 0.8.4-2+b1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
pyo3 (RUSTSEC-2026-0177, GHSA-chgr-c6px-7xpp)
pyo3 (RUSTSEC-2026-0176, GHSA-36hh-v3qg-5jq4)
so 0.4.10-4 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
webbrowser (RUSTSEC-2026-0257, GHSA-2ph8-5cr8-hr33)
sq 1.3.1-12 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
tree-sitter-cli 0.26.11-1 webbrowser (RUSTSEC-2026-0257, GHSA-2ph8-5cr8-hr33)
xh 0.26.2-1 h2 (RUSTSEC-2026-0258, GHSA-q83h-524g-xf6h)
quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)
xleak 0.2.6+dfsg-1+b1 quick-xml (high, RUSTSEC-2026-0195)
quick-xml (high, RUSTSEC-2026-0194)