Tracked for PyPI packages. HuggingFace models declare Python dependencies, so cargo packages are not covered.
cvss
0.0
high
severity band, no base score published
epss
not scored
chance of exploitation in 30 days
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — GHSA-5j98-2g5x-46v6, the advisory selected below
// 3 advisories
GHSA-5j98-2g5x-46v6
HIGH
When calling Resolver::lookup() or Resolver::lookupip() on a resolver with DNSSEC validation enabled, both methods return Ok(...) if DNSSEC validation fails. It is possible but very inconvenient to check the validation status of individual records. These methods should instead return an error when DNSSEC validation determines a response is bogus.
Checked 2026-10-06 at 02:01 UTC. The most recent advisory here was published 2026-10-05. Updated continuously from NVD, GHSA, OSV and CNA feeds.