Issues

Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  evstack/ev-node#3495 · opened on Oct 25, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  evstack/ev-node#3494 · opened on Oct 25, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  evstack/ev-node#3493 · opened on Oct 25, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  evstack/ev-node#3487 · opened on Oct 16, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  evstack/ev-node#3486 · opened on Oct 16, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  evstack/ev-node#3485 · opened on Oct 16, 2026

• RUSTSEC-2026-0338: Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads

  evstack/ev-node#3478 · opened on Oct 12, 2026

• RUSTSEC-2026-0340: Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled

  evstack/ev-node#3477 · opened on Oct 12, 2026

• RUSTSEC-2026-0342: Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto

  evstack/ev-node#3476 · opened on Oct 12, 2026

• RUSTSEC-2026-0341: Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed

  evstack/ev-node#3474 · opened on Oct 12, 2026

• RUSTSEC-2026-0339: Unbounded growth of pending connection ID retirements in quinn-proto

  evstack/ev-node#3475 · opened on Oct 12, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  evstack/ev-node#3452 · opened on Sep 15, 2026

• p2p: allowed_peers list propagated network-wide instead of being local to the node

  evstack/ev-node#3254 · opened on Apr 15, 2026

• EVM: Set FinalizedHash correctly in forkChoiceUpdatedV3 call in ExecuteTxs

  evstack/ev-node#2402 · opened on Jun 26, 2025 · V1.0.0
  4

• [Feature Request]: double-sign detection

  evstack/ev-node#1672 · opened on May 17, 2024
  6