Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  azerozero/saragossa#46 · Filter by author github-actions opened on Oct 24, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  azerozero/saragossa#21 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  azerozero/saragossa#20 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  azerozero/saragossa#19 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  azerozero/saragossa#18 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  azerozero/saragossa#17 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  azerozero/saragossa#16 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  azerozero/saragossa#15 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  azerozero/saragossa#14 · Filter by author github-actions opened on Oct 13, 2026

• RUSTSEC-2026-0341: Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

  azerozero/saragossa#13 · Filter by author github-actions opened on Oct 13, 2026

• perf(27B dense u4): decode 30 tok/s vs 40-80 mlx-lm — trop de dispatches par token

  enhancement
  azerozero/saragossa#11 · Filter by author Destynova2 opened on Oct 5, 2026
  1

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  azerozero/saragossa#10 · Filter by author github-actions opened on Sep 15, 2026

• RUSTSEC-2024-0436: paste - no longer maintained

  azerozero/saragossa#1 · Filter by author github-actions opened on Jul 9, 2026