RustSec @RustSec
Security advisory database for Rust crates published through https://t.co/NctFWNHsjG. A project of the @rustsecurecode working group. rustsec.org Joined January 2017-
Tweets148
-
Followers2K
-
Following16
-
Likes42
Rust is the fastest growing language on GitHub, and GitHub’s supply chain security features now help keep your Rust projects secure 🔒 github.co/3tiGH9E
blog.logrocket.com/comparing-rust… Comparing Rust supply chain safety tools
A malicious crate was uploaded to crates.io, targeting GitLab CI environments. Read more on the security advisory: blog.rust-lang.org/2022/05/10/mal…
The regex crate is vulnerable to denial of service attacks when parsing untrusted regexes (CVE-2022-24713). We released version 1.5.5, fixing the issue. Read the advisory: blog.rust-lang.org/2022/03/08/cve…
The std::fs::remove_dir_all function in the Rust standard library is vulnerable to a race condition (CVE-2022-21658). We will release Rust 1.58.1 with the fix later today. Read the advisory: blog.rust-lang.org/2022/01/20/cve…
This is the first year that we've ever seen fewer advisories filed than the previous year! One reason why is because the bulk of advisories for vulnerabilities discovered by the Rudra static code analyzer were filed in 2020 x.com/yechan_bae/sta…
We are very happy to share that Rudra received a distinguished artifact award in SOSP 2021!
Growth in the @RustSec security advisory database year-over-year throughout its 6-year history
@Erstejahre The crates.io team says to report it to [email protected]
@Erstejahre From the @RustSec side, you can file an advisory for the affected release so cargo-audit users will see it. If the crate can be reclaimed, the malicious release should be yanked. Beyond that there isn’t a process I’m aware of, but I can ask the crates.io team!
We have a security advisory for rustc today: blog.rust-lang.org/2021/11/01/cve… We will have a 1.56.1 release out soon.
Heads up Rustsceans! You might have recently gotten a security vulnerability notification for RUSTSEC-2020-0071: a potential segfault impacting `time` v0.1 (cont’d) rustsec.org/advisories/RUS…
The rustsec.org web site now features severity information for each security advisory
@hdevalence In programs where certain environment variables are modified from different threads, it can result in memory corruption. This has manifested as programs segfaulting.
@jonasbb92 Probably. We’re discussing it on the #wg-secure-code Zulip channel.
Unfortunately we don’t have clear guidance for what to do. It impacts several major ecosystem crates including `chrono`. For the latest information, see the upstream issue on `time`: github.com/time-rs/time/i…
This isn’t a false positive, but rather a case where the advisory has been updated to include earlier versions of the `time` crate. Unfortunately the fix is only in `time` v0.2, and it’s unclear if it can be backported to v0.1 due to API constraints.
My team's first release since I joined GitHub is out today, and my first GitHub blog is live! Thanks so much to the @RustSec community for collaborating to bring curated Rust security advisories to the GitHub Advisory Database! github.blog/2021-09-23-git…
@KodrAus (we have withdrawn some unmaintained crate advisories, but that was because new maintainers stepped up which is what we’re trying to encourage!)
@KodrAus As you are seeing, we perform due diligence before publishing unmaintained crate advisories. Agreed we could use a more formal policy, but so far in the course of several years we have not received any complaints about maintained crates being marked unmaintained.
@bodil question about the im/im-rc crates: we have a request to mark them as unmaintained in the RustSec Advisory Database: github.com/RustSec/adviso… Is that ok? If you have any objections whatsoever we'll close the PR.
Mara @m_ou_se
43K Followers 401 Following Rust dev, Electronics engineer, Author, @rustlang Library team lead, ADHD, Polyamorous, Lesbian, She/Her
Patrick Walton @pcwalton
18K Followers 515 Following Programming languages and graphics person. @pcwalton.bsky.social
third-party evaluatio... @mycoliza
23K Followers 1K Following despite it all, i still love these silly computing machines. making a better computer at @oxidecomputer. a girl, in case you couldn't tell.
Luca Palmieri @algo_luca
16K Followers 2K Following Rust / backend dev / org design / climate. Baking on the good days. Author of https://t.co/WDxzUHAAe6. Building https://t.co/YMfw1oaHIi, a new Rust web framework.
🇺🇦 Ingvar Stepa... @RReverser
8K Followers 1K Following OSS devtools, ex-Google Chrome, ex-Cloudflare, these days actively working in the WebAssembly land. Not here anymore, find me on Bluesky.
llogiq @llogiq
3K Followers 877 Following #RustLang 🦀 bard. Father of 3+cat. Devourer of waffles. Probably knows the German word for it, whatever it is. Sometimes randomly grabs a Ukulele&sings. he/him
David Wong @cryptodavidw
18K Followers 3K Following load bearing @zksecurityXYZ & AI @zkaol, author of Real-World Cryptography, prev: architect @Mina, sec lead Libra (@Facebook), crypto @NCCGroup
isenhu @isenhu
35 Followers 3K Following
0xcatalin.xyz @0xcatalin
84 Followers 214 Following security researcher @AdevarLabs | rustacean 🦀 | masters in cyber security | ex L1 dev and bitdefender core security team
Filip Laurentiu @filiplaurentiu
363 Followers 2K Following Cybersecurity #CISSP & #CC | Applied Cryptography | Blockchain Developer MBA in Cybersecurity student👨💻
Manuel Alejandro @__mamcode__
497 Followers 4K Following Software engineer, enthusiast of open source technologies. A Pythonist trying to be a Rustacean.
Philippe Flap @so_flap
1 Followers 2K Following
Sumit Sisodiya @SumitSisodiya28
180 Followers 306 Following Building @arthneura On-chain settlement and a marketplace for AI agents.
Dillamond @dillamond777
10 Followers 696 Following - BOSS, Plan₿Network, btcplusplus - btctranscripts
makoto takemiya 武�... @M4K070
5K Followers 2K Following 武宮誠 (Makoto Takemiya, PhD in Interdisciplinary Information Studies) 博士(東大・学際情報学)・ソラミツ株式会社 (SORAMITSU @soramitsu_co), SORA @sora_xor
Bhavik Limbani 🦀 @BhavikLimani
206 Followers 2K Following Software Engineer & Leading @Widle_Studio Learning & applying - AI Factories | Building a community ⏳ - Learning, Building and Upskilling. 🦀
Eval Exec @evil_exec
167 Followers 2K Following Passionate Senior Software Engineer | Rust · C++ · Go · Lisp · Nix · Linux | Open Source Contributor, Lifelong Learner 🚀 https://t.co/dxsnbWD3IG
Imran Mustafa @imranmustafa030
3 Followers 21 Following Web 3.0 developer crafting the future of the internet 🌐 Passionate about decentralized technologies and creating immersive digital experiences.#Web3 #Developer
Tracebit @tracebit_com
370 Followers 5K Following The Assume Breach platform that detects intrusions in seconds. Also on https://t.co/T4VNPGjS2O
Petar Maksimović @PetarMax
236 Followers 327 Following Research Engineer at @HarmonicMath. Program analysis, photography, singing, tennis, mental health. All views are my own.
Hermetic @HermeticSys
6 Followers 76 Following Hermetic — Agent-isolated credential broker. Your AI agent makes API calls without ever seeing the secret. Rust, AGPL, Linux. https://t.co/nEAEypNLVN
Jean Paulo da Rosa @JeanPaulod63537
5 Followers 334 Following
wdm33 @_wdm33
66 Followers 494 Following Security architect exploring deterministic systems Founder @VadrantHQ Building Katiba + Ziranity + Shadowbox • verified design • deterministic infrastructure
Menon @schottge_menon
265 Followers 3K Following Old grumpy man. Linux and BSD user since the mid\late 90's.
Em @equivocum
103 Followers 838 Following Rustacean | @rektoff_xyz | @solanaturbine | @AckeeBlockchain | @Starknet (with honors) alum
Gustav Brlt @BltyGustav89883
66 Followers 247 Following Saved man thanks to J.C (e.g, John 6:47, 1 John 5:13, Eph 2:8-9, 1 Cor 15) ; I work in cybersecurity . I like Rust, Nix, Hermes-Agent, and building things.
Fabio Rubim @FabioRubim30162
7 Followers 901 Following
0xdajneem23 @Thanh06660548
27 Followers 757 Following 🤓A developer who is doing an unwanted job to get food and coffee
Manoah Fanzing 🇳�... @FanzingManoah
550 Followers 733 Following God, go before me in everything I do. PQP9MS6D
Socket @SocketSecurity
23K Followers 5K Following Socket is the #1 software supply chain security platform. Next-gen SCA + SBOM + 0-day prevention. LOVED BY DEVELOPERS. 👀 @npm_malware
66IYRIVZPX @66IYRIVZPX
129 Followers 914 Following
alias @loadingalias
838 Followers 3K Following Founder @ alias-research | cargo-rail | rscrypto | privacy advocate | Member @ Zed Guild 🦀
dub @Dub0x3A
5K Followers 2K Following latency nerd | QD @CyclosResearch - journey to sub micro scatter brain, scatter brain
agent crunchwrap @agent_wrap
858 Followers 1K Following ai agent groupie ⛬ member of technical staff @FactoryAI
Swedge @SwedgeDoes
0 Followers 8 Following
Vishesh Sachdev @vishuu0123
42 Followers 445 Following Freelance Blockchain and RUST Dev 🦀 | Solana | Top Rated @Upwork | Smart Contract Developer & Security Researcher
SuperFei @stormslowly
82 Followers 986 Following
satyajit nayak | MVPs... @satyajitnayk
16 Followers 266 Following Senior Backend / Platform Engineer | Distributed Systems | Reliability Engineering | Async Infrastructure
jimi @jimisaiyan
211 Followers 1K Following Hacker - Android Malware Researcher 🪲 OSCE³ Speaker @ETHSofiaBG @GISECglobal 📢 Sponsored @0xGBS @EncodeClub @Futurist_conf @ETHNA_rocks @Ethereum_JP 🎟️
Jason @jsn_yrty
278 Followers 523 Following Offensive AI and inveterate reader, polyglot, Veteran. https://t.co/6Wbbg62sEW
Nicolas Merlet @NicolasMerlet
3 Followers 61 Following
🛡️ Lionel LIMOL @Lionel_LIMOL
172 Followers 2K Following 👋🏾 Hi I'm Lionel, Blockchain specialist, I take part in building an NFT marketplace on the Flow Blockchain.
ilovelife @ilovek8s
26K Followers 3K Following 资深全干工程师 | 尊贵的六边形战士 | 独立开发者出海技术栈：https://t.co/av5jVVXXou 🌟欢迎DM🌟
Patrick Walton @pcwalton
18K Followers 515 Following Programming languages and graphics person. @pcwalton.bsky.social
Manish @ManishEarth
15K Followers 647 Following territory mapper. 💉did @ca_covid . 🗣️ likes languages. 📜 @unicode stuff. helped make @rustlang. ✈️ Repatriate/ABCD. 👨🔬 Formerly physics. he/him
Rust Language @rustlang
152K Followers 2 Following A programming language empowering everyone to build reliable and efficient software. ** This account is no longer active. Follow us on other platforms! **
Andrew Gallant @burntsushi5
11K Followers 97 Following I love to code. I rarely check DMs. My email address is on my web site.
Aria Desires @Gankra_
7K Followers 364 Following its me, the sapphic disaster who maintains your docs. trans woman, she/they, 30 (avatar: @dizzimitzi) on a sabbatical
nrc @nick_r_cameron
6K Followers 602 Following Previously: Rust at Microsoft, Rust core team, distributed databases at PingCAP, Firefox graphics and layout. He/him.
Rust Security 🦀 �... @RustSecurity
4K Followers 4K Following News about #Rustlang Security & Fuzzing. Not affiliated with @rustlang core team. 🎉 #Rust security Audit and Fuzzing training is now available 🥳
crates.io status @cratesiostatus
6K Followers 3 Following Is your https://t.co/NctFWNpRs8 running? Outages, status updates, and new features for your favorite @rustlang package registry
Rust Secure Code WG @rustsecurecode
972 Followers 8 Following Official Twitter for the Rust Secure Code Working Group: making it easy to write secure code in Rust
Yehuda Katz @wycats
60K Followers 675 Following @[email protected] OSS enthusiast and @wykittens's parent. Heroku. Co-author of Extensible Web Manifesto. Front-end developer. @wifelette's husband. he/him
Huon Wilson @huon_w
1K Followers 762 Following Alumni Rust core team, formerly Swift at @Apple. (he/they) huonw in the sky, too.
Dave Herman @littlecalculist
14K Followers 400 Following Likes people & computers. Work: LinkedIn/Mozilla/JS/TC39/Rust (here I speak only for me). ❤️: @lisasilveria & @tinycalculist. Goes by dherman… elsewhere. he/himTrends for United States
You might like
