Bugs Rust Won't Catch | corrode Rust Consulting
corrode.dev
In April 2026, Canonical disclosed 44 CVEs in uutils, the Rust reimplementation of GNU coreutil…

I’m not writing this to criticize the uutils team. Quite the contrary; I actually want to thank them for sharing the audit results in such detail so that we can all learn from them.