Issues

• RUSTSEC-2026-0400: Use-after-free of a dictionary after a one-shot call on a context with an open stream

  Task

  squidowl/halloy#2511 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0399: Use-after-free through init_using_cdict and init_using_ddict

  Task

  squidowl/halloy#2510 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0401: Out-of-bounds read in train_from_buffer when sample sizes overflow

  Task

  squidowl/halloy#2508 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0396: Seekable reads a NULL or out-of-bounds seek table

  Task

  squidowl/halloy#2509 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0402: Heap buffer overflow in CCtx::try_clone on a multithreaded context

  Task

  squidowl/halloy#2507 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0406: Use-after-free when changing a multithreaded context with an unfinished frame

  Task

  squidowl/halloy#2506 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0404: Double free in DCtx::try_clone

  Task

  squidowl/halloy#2505 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0405: Out-of-bounds read with an out-of-range InBuffer::pos

  Task

  squidowl/halloy#2504 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0397: OutBuffer::around_pos exposes uninitialized memory

  Task

  squidowl/halloy#2503 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0395: Use-after-free with CParameter::StableInBuffer

  Task

  squidowl/halloy#2502 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  Task

  squidowl/halloy#2500 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end

  Task

  squidowl/halloy#2499 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

  Task

  squidowl/halloy#2498 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  Task

  squidowl/halloy#2484 · Filter by author github-actions opened on Oct 24, 2026

• Per-user direct messsage notification settings

  Feature

  squidowl/halloy#2477 · Filter by author lephe opened on Oct 22, 2026

• [Feature request] Allow more theme variables

  Feature

  squidowl/halloy#2474 · Filter by author anneke opened on Oct 21, 2026
  2

• RUSTSEC-2026-0372: zvariant_derive is unmaintained

  Task

  squidowl/halloy#2465 · Filter by author github-actions opened on Oct 18, 2026

• RUSTSEC-2026-0370: zvariant is unmaintained

  Task

  squidowl/halloy#2464 · Filter by author github-actions opened on Oct 18, 2026

• RUSTSEC-2026-0371: zbus_names is unmaintained

  Task

  squidowl/halloy#2463 · Filter by author github-actions opened on Oct 18, 2026

• [Release request] AppImage

  Task

  squidowl/halloy#2459 · Filter by author Arutosio opened on Oct 16, 2026
  1

  

• zwnj shouldn't be a valid channel character

  squidowl/halloy#2447 · Filter by author 4e554c4c opened on Oct 13, 2026
  1

• [Feature request] add setting to control cursor blinking state

  Feature

  squidowl/halloy#2444 · Filter by author flingr opened on Oct 12, 2026

• feature request: random notification sounds, or external command

  Feature

  squidowl/halloy#2440 · Filter by author ToyKeeper opened on Oct 10, 2026
  1

• smooth scrolling gets stuck

  Bug

  squidowl/halloy#2437 · Filter by author ToyKeeper opened on Oct 9, 2026
  2

• [Feature request] Hide nicknames per channel/user

  Feature

  squidowl/halloy#2422 · Filter by author illutr0n opened on Oct 5, 2026