RU
Vendor
rust-lang
39
CVEs
0
On KEV
0
New 30D
Products
RU10.0
rust
rust-lang
24 CVEs0 on KEV0 new
CA8.1
Cargo
Rust-lang
6 CVEs0 on KEV0 new
AS7.5
Async-h1
Rust-lang
2 CVEs0 on KEV0 new
FU5.5
Future-utils
Rust-lang
2 CVEs0 on KEV0 new
FU7.8
Futures-task
Rust-lang
2 CVEs0 on KEV0 new
MD6.1
Mdbook
Rust-lang
1 CVEs0 on KEV0 new
RE7.5
Regex
Rust-lang
1 CVEs0 on KEV0 new
SO5.5
Socket2
Rust-lang
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-5223 | CA Cargo Rust-lang | 5.3 | May 25 | Crates in third party registries can override the cached source of other crates |
| CVE-2026-5222 | CA Cargo Rust-lang | 6.5 | May 25 | Cargo can be coerced to share credentials between registries |
| CVE-2024-43402 | RU rust rust-lang | 8.8 | Sep 4 | Rust OS Command Injection/Argument Injection vulnerability |
| CVE-2024-3566 | RU Rust Rust-lang | 9.8 | Apr 10 | A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific… |
| CVE-2024-24576 | RU Rust Rust-lang | 10.0 | Apr 9 | Rust is a programming language |
| CVE-2023-40030 | RU Rust Rust-lang | 6.1 | Aug 24 | Cargo downloads a Rust project’s dependencies and compiles the project |
| CVE-2023-38497 | CA Cargo Rust-lang | 7.3 | Aug 4 | Cargo downloads the Rust project’s dependencies and compiles the project |
| CVE-2022-46176 | CA Cargo Rust-lang | 5.9 | Jan 11 | Cargo is a Rust package manager |
| CVE-2022-36114 | CA Cargo Rust-lang | 6.5 | Sep 14 | Cargo is a package manager for the rust programming language |
| CVE-2022-36113 | CA Cargo Rust-lang | 8.1 | Sep 14 | Cargo is a package manager for the rust programming language |
| CVE-2022-24713 | RE Regex Rust-lang | 7.5 | Mar 8 | regex is an implementation of regular expressions for the Rust language |
| CVE-2022-21658 | RU Rust Rust-lang | 6.3 | Jan 20 | Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency |
| CVE-2021-29922 | RU Rust Rust-lang | 9.1 | Aug 7 | library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations)… |
| CVE-2021-31162 | RU Rust Rust-lang | 9.8 | Apr 14 | In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics |
| CVE-2020-36323 | RU Rust Rust-lang | 8.2 | Apr 14 | In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the… |
| CVE-2018-25008 | RU Rust Rust-lang | 5.9 | Apr 14 | In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method |
| CVE-2017-20004 | RU Rust Rust-lang | 5.9 | Apr 14 | In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object |
| CVE-2021-28879 | RU Rust Rust-lang | 9.8 | Apr 11 | In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow |
| CVE-2021-28878 | RU Rust Rust-lang | 7.5 | Apr 11 | In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when… |
| CVE-2021-28877 | RU Rust Rust-lang | 7.5 | Apr 11 | In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested |
| CVE-2021-28876 | RU Rust Rust-lang | 5.3 | Apr 11 | In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue |
| CVE-2021-28875 | RU Rust Rust-lang | 7.5 | Apr 11 | In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context |
| CVE-2020-36318 | RU Rust Rust-lang | 9.8 | Apr 11 | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition |
| CVE-2020-36317 | RU Rust Rust-lang | 7.5 | Apr 11 | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem |
| CVE-2015-20001 | RU Rust Rust-lang | 7.5 | Apr 11 | In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe |
| CVE-2020-36202 | AS Async-h1 Rust-lang | 6.1 | Jan 26 | An issue was discovered in the async-h1 crate before 2.3.0 for Rust |
| CVE-2020-26297 | MD Mdbook Rust-lang | 6.1 | Jan 4 | mdBook is a utility to create modern online books from Markdown files and is written in Rust |
| CVE-2020-35920 | SO Socket2 Rust-lang | 5.5 | Dec 31 | An issue was discovered in the socket2 crate before 0.3.16 for Rust |
| CVE-2020-35908 | FU Future-utils Rust-lang | 5.5 | Dec 31 | An issue was discovered in the futures-util crate before 0.3.2 for Rust |
| CVE-2020-35907 | FU Futures-task Rust-lang | 5.5 | Dec 31 | An issue was discovered in the futures-task crate before 0.3.5 for Rust |
| CVE-2020-35906 | FU Futures-task Rust-lang | 7.8 | Dec 31 | An issue was discovered in the futures-task crate before 0.3.6 for Rust |
| CVE-2020-35905 | FU Future-utils Rust-lang | 4.7 | Dec 31 | An issue was discovered in the futures-util crate before 0.3.7 for Rust |
| CVE-2020-26281 | AS Async-h1 Rust-lang | 7.5 | Dec 21 | async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io) |
| CVE-2019-16760 | RU Rust Rust-lang | 7.5 | Sep 30 | Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key |
| CVE-2019-1010299 | RU Rust Rust-lang | 5.3 | Jul 15 | The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure |
| CVE-2019-12083 | RU Rust Rust-lang | 8.1 | May 13 | The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and cause memory… |
| CVE-2018-1000810 | RU Rust Rust-lang | 9.8 | Oct 8 | The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow… |
| CVE-2018-1000657 | RU Rust Rust-lang | 7.8 | Aug 20 | Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Buffer Overflow… |
| CVE-2018-1000622 | RU Rust Rust-lang | 7.8 | Jul 9 | The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local… |