Vulnerabilidades do Rust Rustfs
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Rust Rustfs: 2 registro(s), com versões afetadas e correções.
CVE-2025-69255
Média · 4.0
CWE-755 07/01/2026
RustFS gRPC GetMetrics deserialization panic enables remote DoS
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.77, a malformed gRPC GetMetrics request causes get_metrics to unwrap() failed deserialization of metric_type/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint. This issue has been patched in version 1.0.0-alpha.78.
CVE-2025-68705
Crítica · 9.8
CWE-22 07/01/2026
RustFS Path Traversal Vulnerability
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.