Issues

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  harehare/mq#2613 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  harehare/mq#2612 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  harehare/mq#2611 · Filter by author github-actions opened on Oct 19, 2026

• RUSTSEC-2026-0373: Missing case-insensitive matching for CSS url function

  harehare/mq#2610 · Filter by author github-actions opened on Oct 19, 2026

• d.a on a dict gives "Unknown selector" with no hint to use d["a"]

  enhancement
  harehare/mq#2591 · Filter by author harehare opened on Oct 17, 2026

• Add Windows installation script via PowerShell (irm | iex)

  harehare/mq#1931 · Filter by author harehare opened on Jun 25, 2026

• Support staging deployment for npm publish

  harehare/mq#1927 · Filter by author harehare opened on Jun 24, 2026

• Please for nixpkgs

  harehare/mq#1860 · Filter by author xbpk3t opened on Jun 13, 2026
  1

• Markdown spec incomplete

  harehare/mq#1855 · Filter by author j-mendez opened on Jun 12, 2026

• Add skills to rpm/deb

  harehare/mq#1607 · Filter by author stdweird opened on Apr 16, 2026

• Binstall support is broken

  bug
  harehare/mq#1515 · Filter by author djmattyg007 opened on Mar 30, 2026

• Add incremental parsing support to CST parser for LSP integration

  lspperf
  harehare/mq#1404 · Filter by author harehare opened on Mar 7, 2026

• Publish Zed Extension

  harehare/mq#1362 · Filter by author harehare opened on Feb 28, 2026