CA
Product
Cargo
by Rust-lang · last CVE May 25, 2026
6
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch

Add Cargo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-36113
8.1
1%
Sep 14
Cargo is a package manager for the rust programming language
Affected: before 0.65.0
CVE-2023-38497
7.3
1%
Aug 4
Cargo downloads the Rust project’s dependencies and compiles the project
Affected: before 0.72.2
CVE-2026-5222
6.5
0%
May 25
Cargo can be coerced to share credentials between registries
Affected: 1.68.0 before 1.96.0
CVE-2022-36114
6.5
1%
Sep 14
Cargo is a package manager for the rust programming language
Affected: before 0.65.0
CVE-2022-46176
5.9
1%
Jan 11
Cargo is a Rust package manager
Affected: through 0.67.0
CVE-2026-5223
5.3
0%
May 25
Crates in third party registries can override the cached source of other crates
Affected: before 1.96.0
Showing 6