Skip to content
OpenAdvisories

Package · Wolfi

nushell

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    Model Context Protocol rust-sdk zed nushell Wolfi npm crates.io
  • High 8.7
    CVE-2026-31812

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial p…

    quinn-rs quinn zed wasmcloud Debian Ubuntu Wolfi crates.io
  • High 7.3
    CVE-2025-29787

    zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write

    `zip` is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the `zip` crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlier in the archive are…

    zip-rs zip2 deno pixi Ubuntu Wolfi crates.io