Issues

• RUSTSEC-2026-0459: libsqlite3-sys via C SQLite CVE-2026-119375

  bitcoindevkit/bdk#2463 · Filter by author github-actions opened on Nov 10, 2026

• chain: From<TxGraph> for TxUpdate drops first_seen

  bug
  bitcoindevkit/bdk#2461 · Filter by author BarbieRajput opened on Nov 6, 2026

• esplora: blocking and async features fail to compile without std (regression in 0.22.3)

  bug
  bitcoindevkit/bdk#2459 · Filter by author BarbieRajput opened on Nov 6, 2026
  1

• RUSTSEC-2026-0441: pin-utils is unmaintained

  bitcoindevkit/bdk#2458 · Filter by author github-actions opened on Nov 6, 2026

• RUSTSEC-2026-0429: zip: ZipArchive::extract aborts the process on a symlink entry with a large declared size

  bitcoindevkit/bdk#2455 · Filter by author github-actions opened on Nov 3, 2026
  2

• SpkTxOutIndex::is_used returns true for untracked indices

  bitcoindevkit/bdk#2444 · Filter by author bhuvan-somisetty opened on Oct 28, 2026

• chain: SyncRequestBuilderExt/FullScanRequestBuilderExt only work with BlockHash checkpoint data

  bitcoindevkit/bdk#2437 · Filter by author bhuvan-somisetty opened on Oct 24, 2026

• bdk_chain: widen supported rusqlite version range instead of pinning 0.31.0

  dependenciesnew feature
  bitcoindevkit/bdk#2436 · Filter by author thesimplekid opened on Oct 24, 2026 · Chain 0.24.0
  1

  

• RUSTSEC-2026-0382: Certificate verification may accept distrusted intermediates

  bitcoindevkit/bdk#2431 · Filter by author github-actions opened on Oct 23, 2026

• RUSTSEC-2026-0381: Bundled root certificates allow trust in distrusted emSign intermediates

  bitcoindevkit/bdk#2432 · Filter by author github-actions opened on Oct 23, 2026

• feat(core): derive Eq for CheckPoint and common traits on spk_client types

  bitcoindevkit/bdk#2428 · Filter by author ravindra-RKB opened on Oct 22, 2026

• feat(core): implement Clone, Debug, FusedIterator, and IntoIterator for checkpoint iterators

  bitcoindevkit/bdk#2427 · Filter by author bhuvan-somisetty opened on Oct 22, 2026

• chain: batch anchor-height queries in CanonicalTask via anchored leaves

  bitcoindevkit/bdk#2403 · Filter by author evanlinjin opened on Oct 19, 2026
  1

• RUSTSEC-2026-0368: zip: ZipArchive::extract creates symbolic links whose attacker-controlled targets are outside the destination directory

  bitcoindevkit/bdk#2389 · Filter by author github-actions opened on Oct 17, 2026

• RUSTSEC-2026-0369: ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target

  bitcoindevkit/bdk#2387 · Filter by author github-actions opened on Oct 17, 2026

• RUSTSEC-2026-0367: Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation

  bitcoindevkit/bdk#2388 · Filter by author github-actions opened on Oct 17, 2026

• feat(chain): implement ExactSizeIterator, FusedIterator, and Debug for SpkIterator

  bitcoindevkit/bdk#2383 · Filter by author bhuvan-somisetty opened on Oct 15, 2026

• RUSTSEC-2026-0346: Debug impls for client session values expose TLS secrets

  bitcoindevkit/bdk#2379 · Filter by author github-actions opened on Oct 15, 2026

• RUSTSEC-2026-0349: Unauthenticated ServerHello can downgrade later connections to classical key exchange

  bitcoindevkit/bdk#2378 · Filter by author github-actions opened on Oct 15, 2026

• Audit bdk_esplora and bdk_electrum for panics caused by external inputs

  auditdo-not-close
  bitcoindevkit/bdk#2371 · Filter by author notmandatory opened on Oct 12, 2026
  2

• LocalChain::insert_block misreports PrevBlockhashMismatch as a genesis AlterCheckPointError

  bitcoindevkit/bdk#2357 · Filter by author DevaanshPathak opened on Oct 9, 2026
  2

• Esplora: server-supplied height-0 entry in latest_blocks panics sync in CheckPoint::insert

  bugdocumentation
  bitcoindevkit/bdk#2341 · Filter by author notmandatory opened on Oct 2, 2026

• bdk_electrum/bdk_esplora: confirmation anchors are built from unverified server data (no proof-of-work checks)

  bitcoindevkit/bdk#2340 · Filter by author notmandatory opened on Oct 2, 2026
  

• static/bdk.svg still shows the old logo (bdk.png has the new one)

  bugchore
  bitcoindevkit/bdk#2326 · Filter by author Psycarlo opened on Sep 27, 2026
  5

  

• FullScanResponse::last_active_indices should be a Vec<(K, u32)>

  bitcoindevkit/bdk#2314 · Filter by author evanlinjin opened on Sep 16, 2026