Issues

• RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end

  iotaledger/identity#1865 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  iotaledger/identity#1866 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

  iotaledger/identity#1864 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  iotaledger/identity#1863 · Filter by author github-actions opened on Oct 25, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  iotaledger/identity#1862 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0383: Bundled root certificates allow trust in distrusted emSign intermediates

  iotaledger/identity#1861 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  iotaledger/identity#1860 · Filter by author github-actions opened on Oct 21, 2026

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  iotaledger/identity#1859 · Filter by author github-actions opened on Oct 17, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  iotaledger/identity#1858 · Filter by author github-actions opened on Oct 17, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  iotaledger/identity#1857 · Filter by author github-actions opened on Oct 17, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  iotaledger/identity#1856 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  iotaledger/identity#1855 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0283: clear_on_drop is unmaintained

  iotaledger/identity#1854 · Filter by author github-actions opened on Sep 14, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  iotaledger/identity#1849 · Filter by author github-actions opened on Aug 19, 2026

• RUSTSEC-2026-0251: sized-chunks is unmaintained

  iotaledger/identity#1847 · Filter by author github-actions opened on Aug 11, 2026

• RUSTSEC-2026-0248: im is unmaintained

  iotaledger/identity#1846 · Filter by author github-actions opened on Aug 11, 2026

• RUSTSEC-2026-0247: bitmaps is unmaintained

  iotaledger/identity#1845 · Filter by author github-actions opened on Aug 11, 2026

• Format-less VC validation

  AddedEnhancementRustWasm
  Task

  iotaledger/identity#1844 · Filter by author UMR1352 opened on Jul 21, 2026

• DataIntegrityProof VC proof mechanism

  AddedEnhancementRustWasm
  Task

  iotaledger/identity#1843 · Filter by author UMR1352 opened on Jul 21, 2026

• WASM: implement a proper TS CredentialValidationError

  AddedWasm
  Task

  iotaledger/identity#1842 · Filter by author UMR1352 opened on Jul 21, 2026
  

• Implement Bitstring Status List v1.0

  AddedEnhancementRustWasm
  Task

  iotaledger/identity#1839 · Filter by author UMR1352 opened on Jul 16, 2026
  

• RUSTSEC-2026-0195: Unbounded namespace-declaration allocation in NsReader enables memory-exhaustion denial of service

  iotaledger/identity#1833 · Filter by author github-actions opened on Jul 3, 2026

• RUSTSEC-2026-0194: Quadratic run time when checking a start tag for duplicate attribute names

  iotaledger/identity#1832 · Filter by author github-actions opened on Jul 3, 2026

• RUSTSEC-2026-0173: proc-macro-error2 is unmaintained

  iotaledger/identity#1824 · Filter by author github-actions opened on Jun 8, 2026

• Design a way to shard large revocation bitmaps

  AddedEnhancementMoveRustWasm
  Task

  iotaledger/identity#1814 · Filter by author UMR1352 opened on May 5, 2026