GitHub Advisory Database now supports Rust
We’re excited to announce that the GitHub Advisory Database now includes curated security advisories on the Rust ecosystem!
![](https://github.blog/wp-content/uploads/2019/09/security-1200-630.png?resize=1200%2C630)
GitHub is on a mission to create a more secure supply chain for all developers and organizations. To do that, we need to empower all developer communities with a comprehensive vulnerability database.
That’s why we’re excited to announce that the GitHub Advisory Database now includes curated security advisories on the Rust ecosystem!
The Rust addition expands our Advisory Database coverage to eight supported programming language ecosystems: Composer (PHP), Go, Maven, npm, NuGet, pip, RubyGems and Rust.
This coverage ensures that any member of the Rust community can check for security issues in the same place that their code resides: on GitHub. And it’s only the first step! Check out our public roadmap as we work toward Rust support for the dependency graph and Dependabot alerts.
Thank you, RustSec and Rust community!
As we worked to add the Rust ecosystem to the Advisory Database, we received a lot of support from RustSec and the Rust community.
We are immensely grateful to RustSec, an independent organization that collects, standardizes, and publishes security advisories related to Rust libraries. Its free public database is the starting point for our own Rust vulnerability dataset.
We plan to continue our collaboration with RustSec and the broader Rust community by making our own GitHub Security Advisory data available and easily consumable to further supplement theirs. Working together, we can do more to reduce the problem of vulnerability visibility than we could apart.
Advisories
GitHub’s Advisory Database is an open database of security advisories focused on high-quality, actionable vulnerability information for developers. It’s licensed under Creative Commons Attribution 4.0, so the data can be used anywhere.
So far, we’ve published 317 Rust Security Advisories, and this number will grow as we collect more data from the community. You can see current Rust advisories by selecting Rust on the left menu in the GitHub Advisory Database.
Learn more
Jump in and explore Rust advisories today, or learn more about our other supply chain security features as follows:
- The Advisory Database
- Security advisories
- Dependency graph
- Dependabot alerts
- Dependabot security updates
Tags:
Written by
Related posts
![](https://github.blog/wp-content/uploads/2024/01/Security-DarkMode-3-1.png?resize=400%2C212)
From object transition to RCE in the Chrome renderer
In this post, I’ll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.
![](https://github.blog/wp-content/uploads/2023/11/Security-LightMode-4.png?resize=400%2C212)
Configure GitHub Artifact Attestations for secure cloud-native delivery
Introducing the generally available capability of GitHub Artifact Attestations to secure your cloud-native supply chain packages and images.
![](https://github.blog/wp-content/uploads/2023/12/Security-DarkMode-1-2.png?resize=400%2C212)
3 ways to get Remote Code Execution in Kafka UI
In this blog post, we’ll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.