Issues

• RUSTSEC-2026-0269: Filesystem sandbox escape when paths or symlinks contain trailing slashes

  graphprotocol/graph-node#6787 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0353: Panic when invoking an async-lifted function via call

  graphprotocol/graph-node#6786 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0363: Component-model handle tables are capped only per instance and charged to no limit

  graphprotocol/graph-node#6784 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0356: Panic on erroneous call-to-host from guest realloc call

  graphprotocol/graph-node#6785 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0358: Yielding in a component start function can lead to a host panic

  graphprotocol/graph-node#6783 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0424: Unchecked memory usage in transferring borrowed resources between components

  graphprotocol/graph-node#6782 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  graphprotocol/graph-node#6781 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  graphprotocol/graph-node#6780 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  graphprotocol/graph-node#6778 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  graphprotocol/graph-node#6779 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  graphprotocol/graph-node#6777 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0220: Uint shift operations: incorrect overflow flags and truncated shift amounts

  graphprotocol/graph-node#6776 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0538: Receive loop can spin after a truncated datagram

  graphprotocol/graph-node#6775 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0523: MAX_STREAM_DATA frame can open streams beyond the stream limit

  graphprotocol/graph-node#6774 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  graphprotocol/graph-node#6773 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0524: Long Retry token can panic or exhaust memory in a QUIC client

  graphprotocol/graph-node#6772 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  graphprotocol/graph-node#6771 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  graphprotocol/graph-node#6769 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  graphprotocol/graph-node#6770 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0433: Quadratic parsing of nested image wikilinks with ENABLE_WIKILINKS

  graphprotocol/graph-node#6768 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0414: Exponential event growth with ENABLE_WIKILINKS

  graphprotocol/graph-node#6767 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  graphprotocol/graph-node#6766 · Filter by author github-actions opened on Nov 15, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  graphprotocol/graph-node#6765 · Filter by author github-actions opened on Nov 15, 2026

• [Bug] graphman restore target deployment is dropped by the unused-deployment job while the restore is still running

  graphprotocol/graph-node#6752 · Filter by author madumas opened on Oct 30, 2026

• proofOfIndexing returns an incorrect POI for pruned blocks instead of an error

  graphprotocol/graph-node#6751 · Filter by author tmigone opened on Oct 29, 2026