Skip to content
OpenAdvisories

Package · Wolfi

zed

40 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-42559 Public exploit

    RMCP: DNS rebinding vulnerability in rmcp Streamable HTTP server transport

    RMCP is an official Rust SDK for the Model Context Protocol. Prior to version 1.4.0, the rmcp crate's Streamable HTTP server transport (crates/rmcp/src/transport/streamable_http_server/) did not validate the incoming Host header. This allowed a malicious publ…

    Model Context Protocol rust-sdk zed nushell Wolfi npm crates.io
  • Medium 5.5
    CVE-2026-25541 Public exploit

    Bytes is vulnerable to integer overflow in BytesMut::reserve

    Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "v_capacity >= new_cap + offset" uses an un…

    tokio-rs bytes rust kata-containers Debian Ubuntu Azure Linux Wolfi crates.io