crates.io/web-push CVE-2025-53604: medium 4, EPSS 0.41%

Web Push Denial of Service via malicious Web Push endpoint

Action: Upgrade web-push to 0.10.4 or later.

cargo update -p web-push --precise 0.10.4

Affected

Fixed versions

Sources

• osv: GHSA-fc83-9jwq-gc2m
• nvd: CVE-2025-53604
• https://github.com/pimeys/rust-web-push/pull/68
• https://github.com/pimeys/rust-web-push
• https://rustsec.org/advisories/RUSTSEC-2025-0015.html

CVE-2025-53604 · published 2025-03-24T19:39:27Z · modified 2025-10-28T06:29:10.187331Z · JSON