RustSec (@RustSec) profile picture

RustSec

@RustSec

Security advisory database for Rust crates published through https://nitter.gq/t.co/NctFWNHsjG. A project of the @rustsecurecode working group.

rustsec.org
Joined January 2017
  • Tweets148
  • Following16
  • Followers2.4K
9Media
Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)Photo by RustSec (@RustSec)
RustSec retweeted
GitHub (@github) profile picture
GitHub
@github6 Jun 2022
Rust is the fastest growing language on GitHub, and GitHub’s supply chain security features now help keep your Rust projects secure 🔒 github.co/3tiGH9E
GitHub brings supply chain security features to the Rust community

GitHub brings supply chain security features to the Rust community

The Rust community can now discover, report, and prevent security vulnerabilities.

github.blog
5
87
14
289
RustSec retweeted
llogiq (@llogiq) profile picture
llogiq@llogiq14 May 2022
blog.logrocket.com/comparing… Comparing Rust supply chain safety tools
Comparing Rust supply chain safety tools - LogRocket Blog

Comparing Rust supply chain safety tools - LogRocket Blog

These Rust tools will give you a modicum of security for minimal effort and improve the community’s supply chain security.

blog.logrocket.com
2
17
37
A malicious crate was uploaded to crates.io, targeting GitLab CI environments. Read more on the security advisory: blog.rust-lang.org/2022/05/1…
3
147
13
319
The regex crate is vulnerable to denial of service attacks when parsing untrusted regexes (CVE-2022-24713). We released version 1.5.5, fixing the issue. Read the advisory: blog.rust-lang.org/2022/03/0…
2
69
4
227
The std::fs::remove_dir_all function in the Rust standard library is vulnerable to a race condition (CVE-2022-21658). We will release Rust 1.58.1 with the fix later today. Read the advisory: blog.rust-lang.org/2022/01/2…
81
4
311
We have a security advisory for rustc today: blog.rust-lang.org/2021/11/0… We will have a 1.56.1 release out soon.
4
106
26
390
My team's first release since I joined GitHub is out today, and my first GitHub blog is live! Thanks so much to the @RustSec community for collaborating to bring curated Rust security advisories to the GitHub Advisory Database! github.blog/2021-09-23-githu…
GitHub Advisory Database now supports Rust

GitHub Advisory Database now supports Rust

The GitHub Advisory Database now includes curated security advisories on the Rust ecosystem!

github.blog
15
1
81
The Rust team was notified of a vulnerability affecting crates.io API tokens generation and storage, and out of aboundance of precaution we revoked all existing tokens. Learn more on the advisory: blog.rust-lang.org/2020/07/1…
7
100
9
250
RustSec retweeted
svartalf (@svartalf) profile picture
svartalf@svartalf1 Feb 2020
New version of github.com/actions-rs/audit-… is finally out! Compatibility issue with @RustSec `cargo-audit` was fixed, so it can audit your crates as usual now.
GitHub - actions-rs/audit-check: 🛡️ GitHub Action for security audits

GitHub - actions-rs/audit-check: 🛡️ GitHub Action for security audits

🛡️ GitHub Action for security audits. Contribute to actions-rs/audit-check development by creating an account on GitHub.

github.com
5
28
cargo tools that may or may not be useful when auditing code: audit, clippy, geiger, outdated others?
4
3
12
.@travisci I wanted to contribute adding cargo-audit to the Travis CI @rustlang build environment but I'm not sure where to get started. Where does the code live for creating the build environment?
2
2
7
RustSec retweeted
svartalf (@svartalf) profile picture
svartalf@svartalf8 Oct 2019
Teaser for a newest addition in the "GitHub Actions for #rustlang" toolkit
Image from svartalf (@svartalf)
7
38
Keeping @rustlang projects secure with cargo-audit 0.9: dependency trees, core advisories, unmaintained crates - Inside Rust blog blog.rust-lang.org/inside-ru…
10
26
CVE-2019-16760 has been published, affecting Rust 1.25.0 and lower. Learn more on our blog: blog.rust-lang.org/2019/09/3…
2
42
6
78
List of security-related @rustlang projects github.com/rust-secure-code/…
GitHub - rust-secure-code/projects: Contains a list of security related Rust projects.

GitHub - rust-secure-code/projects: Contains a list of security related Rust projects.

Contains a list of security related Rust projects. - rust-secure-code/projects

github.com
1
1
1
12
Do you <3 @rustlang ? We do :3 We just added support for indexing the amazing advisory @RustSec ! Fire up a #Vulnerability #Management #Rust watcher today: watchers.firosolutions.com
3
16
Introducing the Rust Secure Code Working Group! Check out our GitHub at github.com/rust-secure-code/… or find us on the "secure-code-wg" channel on the rust-lang Zulip! rust-lang.zulipchat.com/#nar…
GitHub - rust-secure-code/wg: Coordination repository for the Secure Code Working Group

GitHub - rust-secure-code/wg: Coordination repository for the Secure Code Working Group

Coordination repository for the Secure Code Working Group - rust-secure-code/wg

github.com
8
18
Everyone, here’s a preliminary report on today’s crates.io issue: internals.rust-lang.org/t/cr…
12
22
If you use str::repeat, you should check your code: we have a security advisory for the standard library. Please share widely. blog.rust-lang.org/2018/09/2…
5
116
6
133
Kudos to @RustSec! We run cargo-audit in @circleci for our #rustlang code. Base64 advisory triggered fail, we got notified and updated deps.
Image from Ossi Herrala (@oherrala)
18
1
47
Load more