Issues

• RUSTSEC-2026-0473: Buffer overflow in Deriver::derive and PkeyCtxRef::derive with OpenSSL 1.1.x

  nearai/cloud-api#1385 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0475: Buffer overflow in MdCtxRef::digest_final

  nearai/cloud-api#1383 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0476: Buffer overflow with AES key wrap with padding in cipher_update

  nearai/cloud-api#1384 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0477: Buffer overflow with AES key wrap with padding in cipher_update_inplace

  nearai/cloud-api#1382 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0479: Out-of-bounds read when a PEM password callback returns an oversized length

  nearai/cloud-api#1381 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0474: X509Ref::ocsp_responders can produce a &str that is not valid UTF-8

  nearai/cloud-api#1380 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0478: Unchecked callback lengths in PSK and cookie callbacks

  nearai/cloud-api#1379 · Filter by author github-actions opened on Nov 11, 2026

• RUSTSEC-2026-0463: Out-of-bounds write in aes::unwrap_key

  nearai/cloud-api#1375 · Filter by author github-actions opened on Nov 10, 2026

• Some DeepSeek V4.1 Flash 1017 deployments stop after one token when replaying trailing reasoning

  bug
  nearai/cloud-api#1369 · Filter by author hanakannzashi opened on Nov 8, 2026
  1

• Read credit balance and usage with a non-JWT credential (sk-/rpt-)

  customer-feedback
  nearai/cloud-api#1365 · Filter by author sergeiest opened on Nov 6, 2026

• Cache-hit billing: verify DeepSeek cache tokens are discounted, and show cost by token type

  customer-feedback
  nearai/cloud-api#1364 · Filter by author sergeiest opened on Nov 6, 2026

• Chutes Chat models intermittently return HTTP 502 in STG and production

  bug
  nearai/cloud-api#1355 · Filter by author hanakannzashi opened on Nov 6, 2026

• RUSTSEC-2026-0441: pin-utils is unmaintained

  nearai/cloud-api#1351 · Filter by author github-actions opened on Nov 6, 2026

• Investigate silent truncation of hosted DeepSeek V4.1 Flash 1017 streams

  nearai/cloud-api#1336 · Filter by author think-in-universe opened on Nov 4, 2026

• Question: would NEAR AI Cloud publish a sealed model comparison?

  nearai/cloud-api#1322 · Filter by author fexx301 opened on Nov 2, 2026

• RUSTSEC-2026-0410: WebAssembly allocator shim corrupts memory on allocation failure

  nearai/cloud-api#1307 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0403: Uninitialized memory exposed when streaming decompression of a legacy frame fails

  nearai/cloud-api#1306 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0398: Seekable::decompress sets a Vec length beyond its capacity for offsets past the end

  nearai/cloud-api#1305 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0391: Data from an abandoned stream leaks into the next stream on a reused context

  nearai/cloud-api#1304 · Filter by author github-actions opened on Oct 27, 2026

• RUSTSEC-2026-0387: Multiple timing variability issues in operations intended to be constant-time

  nearai/cloud-api#1300 · Filter by author github-actions opened on Oct 25, 2026

• Support per-organization concurrency overrides for individual models

  apienhancement
  nearai/cloud-api#1288 · Filter by author PierreLeGuen opened on Oct 21, 2026
  

• Support model public-key routing for self-hosted System One

  nearai/cloud-api#1285 · Filter by author hanakannzashi opened on Oct 21, 2026

• Provider registry: model discovery and approval, archiving, reasoning, and policy-aware failover

  nearai/cloud-api#1273 · Filter by author ilblackdragon opened on Oct 19, 2026

• Design: single-hop reseller credit transfers from payment and staking accrual

  nearai/cloud-api#1261 · Filter by author think-in-universe opened on Oct 16, 2026
  3

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  nearai/cloud-api#1257 · Filter by author github-actions opened on Oct 15, 2026