Issues

• RUSTSEC-2026-0255: Panic-safety unsoundness in Chunk, RingBuffer, and InlineArray (use-after-free / double-free)

  databendlabs/databend-meta#178 · Filter by author github-actions opened on Aug 17, 2026

• RUSTSEC-2026-0251: sized-chunks is unmaintained

  databendlabs/databend-meta#176 · Filter by author github-actions opened on Aug 17, 2026

• RUSTSEC-2023-0126: Aliasing violation in OrdSet insertion

  databendlabs/databend-meta#177 · Filter by author github-actions opened on Aug 17, 2026

• RUSTSEC-2026-0248: im is unmaintained

  databendlabs/databend-meta#175 · Filter by author github-actions opened on Aug 17, 2026

• RUSTSEC-2026-0247: bitmaps is unmaintained

  databendlabs/databend-meta#174 · Filter by author github-actions opened on Aug 17, 2026

• RUSTSEC-2026-0235: Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc

  databendlabs/databend-meta#173 · Filter by author github-actions opened on Aug 10, 2026

• RUSTSEC-2026-0173: proc-macro-error2 is unmaintained

  databendlabs/databend-meta#153 · Filter by author github-actions opened on Jun 8, 2026

• RUSTSEC-2026-0118: NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses

  databendlabs/databend-meta#130 · Filter by author github-actions opened on May 4, 2026

• RUSTSEC-2026-0119: CPU exhaustion during message encoding due to O(n²) name compression

  databendlabs/databend-meta#129 · Filter by author github-actions opened on May 4, 2026

• RUSTSEC-2026-0097: Rand is unsound with a custom logger using rand::rng()

  databendlabs/databend-meta#116 · Filter by author github-actions opened on Apr 13, 2026

• RUSTSEC-2024-0384: instant is unmaintained

  databendlabs/databend-meta#45 · Filter by author github-actions opened on Feb 2, 2026

• RUSTSEC-2024-0436: paste - no longer maintained

  databendlabs/databend-meta#46 · Filter by author github-actions opened on Feb 2, 2026

• RUSTSEC-2023-0071: Marvin Attack: potential key recovery through timing sidechannels

  databendlabs/databend-meta#43 · Filter by author github-actions opened on Feb 2, 2026

• RUSTSEC-2025-0141: Bincode is unmaintained

  databendlabs/databend-meta#44 · Filter by author github-actions opened on Feb 2, 2026

• Code Quality: Metric parsing silently uses default values

  enhancement
  databendlabs/databend-meta#31 · Filter by author drmingdrmer opened on Jan 31, 2026

• Code Quality: Leader endpoint parse failures silently hidden

  enhancement
  databendlabs/databend-meta#30 · Filter by author drmingdrmer opened on Jan 31, 2026

• Code Quality: Auth token parsing errors silently discarded

  enhancement
  databendlabs/databend-meta#29 · Filter by author drmingdrmer opened on Jan 31, 2026

• Architecture: Magic numbers in configuration defaults

  enhancement
  databendlabs/databend-meta#28 · Filter by author drmingdrmer opened on Jan 31, 2026

• Architecture: Configuration structs have confusing duplicate names

  enhancement
  databendlabs/databend-meta#27 · Filter by author drmingdrmer opened on Jan 31, 2026

• Architecture: Key and Value traits have circular dependency

  enhancement
  databendlabs/databend-meta#26 · Filter by author drmingdrmer opened on Jan 31, 2026

• Architecture: SMV003 implementation leaks into service layer

  enhancement
  databendlabs/databend-meta#25 · Filter by author drmingdrmer opened on Jan 31, 2026

• Bug: .expect() in request handlers can crash entire service

  bug
  databendlabs/databend-meta#24 · Filter by author drmingdrmer opened on Jan 31, 2026

• Bug: Library code panics on type mismatch instead of returning errors

  bug
  databendlabs/databend-meta#23 · Filter by author drmingdrmer opened on Jan 31, 2026

• Bug: Missing vote field silently uses default in consensus protocol

  bug
  databendlabs/databend-meta#22 · Filter by author drmingdrmer opened on Jan 31, 2026

• Bug: Timeout comparison never triggers in get_leader()

  bug
  databendlabs/databend-meta#21 · Filter by author drmingdrmer opened on Jan 31, 2026