Latest vulnerabilities for vendor "rust"

Where

Sort:

Software

rust

rust process_lock crate

Rust CargoCrates in third party registries can override the cached source of other crates

Risk 47

First published (updated )

CVE-2026-5223

Rust CargoCargo can be coerced to share credentials between registries

Risk 15

First published (updated )

CVE-2026-5222

Rust Rust 1.95End of life details

First published (updated )

EOL-rust-1.95

Rust Rust 1.94Reached end of life

EOL

Apr 16, 2026

First published (updated )

EOL-rust-1.94

Rust Rust 1.93Reached end of life

EOL

Mar 6, 2026

First published (updated )

EOL-rust-1.93

oss-secBest practices for signatuverifcation

First published (updated )

https://seclists.org/oss-sec/2025/q4/347

Rust Rust 1.92Reached end of life

EOL

Jan 22, 2026

First published (updated )

EOL-rust-1.92

Rust Rust 1.91Reached end of life

EOL

Dec 11, 2025

First published (updated )

EOL-rust-1.91

BleepingComputerTARmageddon flaw in abandoned Rust library enables RCE attacks

First published (updated )

News

BleepingComputer

The RegisterForking confusing: Vulnerable Rust crate exposes uv Python packager

First published (updated )

News

The Register

Rust Rust Standard LibraryRust standard library didn't detect all path separators on Cygwin

Risk 45

Severity

6.3

First published (updated )

CVE-2025-11233

BleepingComputerMalicious Rust packages on Crates.io steal crypto wallet keys

First published (updated )

News

BleepingComputer

Rust Rust 1.90Reached end of life

EOL

Oct 30, 2025

First published (updated )

EOL-rust-1.90

Rust rust-ffmpegUse After Free

Risk 43

Severity

7.5

First published (updated )

CVE-2025-57616

Rust rust-ffmpegNull Pointer Dereference, Integer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2025-57615

Rust rust-ffmpegInteger Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2025-57614

Rust rust-ffmpegNull Pointer Dereference

Risk 43

Severity

7.5

First published (updated )

CVE-2025-57612

Rust rust-ffmpegNull Pointer Dereference

Risk 27

Severity

5.3

First published (updated )

CVE-2025-57611

Rust Rust 1.89Reached end of life

EOL

Sep 18, 2025

First published (updated )

EOL-rust-1.89

Rust web-pushThe web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the bui…

Risk 22

Severity

First published (updated )

CVE-2025-53604

Rust Rust 1.88Reached end of life

EOL

Aug 7, 2025

First published (updated )

EOL-rust-1.88

Rust usersUsers: `root` appended to group listings

Risk 38

Severity

7.1

EPSS

0.01%

First published (updated )

CVE-2025-5791

Rust usersAffected versions append `root` to group listings, unless the correct listing has exactly 1024 group…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2370001

Rust memory_pagesDivide by Zero

Risk 31

Severity

7.5

EPSS

0.02%

First published (updated )

CVE-2025-48754

Rust process_lock crateRace Condition

Risk 61

Severity

9.8

EPSS

0.02%

First published (updated )

CVE-2025-48751

Rust scsir crateIn group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware devic…

Risk 61

Severity

9.8

EPSS

0.02%

First published (updated )

CVE-2025-48756

Rust anodeRace Condition

Risk 61

Severity

9.8

EPSS

0.02%

First published (updated )

CVE-2025-48753

Rust Rust 1.87Reached end of life

EOL

Jun 26, 2025

First published (updated )

EOL-rust-1.87

OpenSSL OpenSSLRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

Risk 15

Severity

3.7

EPSS

0.07%

First published (updated )

CVE-2025-3416

Rust Rust 1.86Reached end of life

EOL

May 15, 2025

First published (updated )

EOL-rust-1.86

Trending

Vendor Risk Score

Software

Rust CargoCrates in third party registries can override the cached source of other crates

Rust CargoCargo can be coerced to share credentials between registries

Rust Rust 1.95End of life details

Rust Rust 1.94Reached end of life

Rust Rust 1.93Reached end of life

Don't miss critical vulnerabilities

oss-secBest practices for signatuverifcation

Rust Rust 1.92Reached end of life

Rust Rust 1.91Reached end of life

BleepingComputerTARmageddon flaw in abandoned Rust library enables RCE attacks

The RegisterForking confusing: Vulnerable Rust crate exposes uv Python packager

Don't miss critical vulnerabilities

Rust Rust Standard LibraryRust standard library didn't detect all path separators on Cygwin

BleepingComputerMalicious Rust packages on Crates.io steal crypto wallet keys

Rust Rust 1.90Reached end of life

Rust rust-ffmpegUse After Free

Rust rust-ffmpegNull Pointer Dereference, Integer Overflow

Don't miss critical vulnerabilities

Rust rust-ffmpegInteger Overflow

Rust rust-ffmpegNull Pointer Dereference

Rust rust-ffmpegNull Pointer Dereference

Rust Rust 1.89Reached end of life

Rust web-pushThe web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the bui…

Don't miss critical vulnerabilities

Rust Rust 1.88Reached end of life

Rust usersUsers: `root` appended to group listings

Rust usersAffected versions append `root` to group listings, unless the correct listing has exactly 1024 group…

Rust memory_pagesDivide by Zero

Rust process_lock crateRace Condition

Don't miss critical vulnerabilities

Rust scsir crateIn group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware devic…

Rust anodeRace Condition

Rust Rust 1.87Reached end of life

OpenSSL OpenSSLRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`

Rust Rust 1.86Reached end of life

Don't miss critical vulnerabilities

Company

Resources

Contact