Issues

• RUSTSEC-2026-0386: AsyncFd::new and related constructors violate I/O safety

  ericfisherdev/ai-convobot#261 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  ericfisherdev/ai-convobot#260 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  ericfisherdev/ai-convobot#259 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0385: Non-constant-time mask generation and u128 comparisons

  ericfisherdev/ai-convobot#258 · Filter by author github-actions opened on Oct 26, 2026

• npm audit: high/critical advisory found (2026-10-26)

  ericfisherdev/ai-convobot#257 · Filter by author github-actions opened on Oct 26, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  ericfisherdev/ai-convobot#255 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  ericfisherdev/ai-convobot#256 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0348: Brotli certificate decompression can allocate up to 1 GiB before authentication

  ericfisherdev/ai-convobot#254 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0347: Buffered application data sent to outer server after ECH rejection

  ericfisherdev/ai-convobot#253 · Filter by author github-actions opened on Oct 19, 2026

• npm audit: high/critical advisory found (2026-10-19)

  ericfisherdev/ai-convobot#252 · Filter by author github-actions opened on Oct 19, 2026

• npm audit: high/critical advisory found (2026-10-12)

  ericfisherdev/ai-convobot#251 · Filter by author github-actions opened on Oct 12, 2026

• npm audit: high/critical advisory found (2026-10-05)

  ericfisherdev/ai-convobot#250 · Filter by author github-actions opened on Oct 5, 2026

• npm audit: high/critical advisory found (2026-09-28)

  ericfisherdev/ai-convobot#249 · Filter by author github-actions opened on Sep 28, 2026

• RUSTSEC-2026-0285: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

  ericfisherdev/ai-convobot#248 · Filter by author github-actions opened on Sep 21, 2026

• npm audit: high/critical advisory found (2026-09-21)

  ericfisherdev/ai-convobot#247 · Filter by author github-actions opened on Sep 21, 2026

• npm audit: high/critical advisory found (2026-09-14)

  ericfisherdev/ai-convobot#246 · Filter by author github-actions opened on Sep 14, 2026

• fix(routing): guard against literal routes being shadowed by parameterised siblings

  ericfisherdev/ai-convobot#245 · Filter by author ericfisherdev opened on Sep 13, 2026

• fix(context): token budget is capped at 4096 so a larger model context is unusable

  ericfisherdev/ai-convobot#237 · Filter by author ericfisherdev opened on Sep 12, 2026

• feat: conversation compaction — continuity notes for long-running chats

  compaction
  ericfisherdev/ai-convobot#170 · Filter by author ericfisherdev opened on Sep 9, 2026

• fix: hybrid context expansion is a no-op because the RAM bonus is clamped away twice

  bug
  ericfisherdev/ai-convobot#169 · Filter by author ericfisherdev opened on Sep 8, 2026

• RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

  ericfisherdev/ai-convobot#152 · Filter by author github-actions opened on Sep 7, 2026

• RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

  ericfisherdev/ai-convobot#151 · Filter by author github-actions opened on Sep 7, 2026

• RUSTSEC-2026-0186: Unchecked pointer offset in crate memmap2

  ericfisherdev/ai-convobot#149 · Filter by author github-actions opened on Sep 7, 2026

• RUSTSEC-2026-0005: Potential use-after-free in oneshot when used asynchronously

  ericfisherdev/ai-convobot#150 · Filter by author github-actions opened on Sep 7, 2026

• RUSTSEC-2026-0002: IterMut violates Stacked Borrows by invalidating internal pointer

  ericfisherdev/ai-convobot#148 · Filter by author github-actions opened on Sep 7, 2026