Issues

• RUSTSEC-2026-0316: Dynamic record lifting can allocate beyond the hostcall fuel limit

  hyperledger-firefly/cardano#102 · Filter by author github-actions opened on Sep 30, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  hyperledger-firefly/cardano#97 · Filter by author github-actions opened on Sep 15, 2026

• RUSTSEC-2026-0269: Filesystem sandbox escape when paths or symlinks contain trailing slashes

  hyperledger-firefly/cardano#93 · Filter by author github-actions opened on Sep 1, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  hyperledger-firefly/cardano#88 · Filter by author github-actions opened on Aug 19, 2026

• RUSTSEC-2026-0258: h2 unbounded empty DATA frames

  hyperledger-firefly/cardano#89 · Filter by author github-actions opened on Aug 19, 2026

• RUSTSEC-2026-0222: Stores can mix up type indices between engines

  hyperledger-firefly/cardano#84 · Filter by author github-actions opened on Aug 1, 2026