Latest vulnerabilities for vendor "rust-lang"

Where

Sort:

Software

rust-lang cargo

rust-lang async-h1

rust-lang cargo rust

rust-lang future-utils

rust-lang rust

Rust CargoCrates in third party registries can override the cached source of other crates

Risk 74

Severity

6.5

First published (updated )

CVE-2026-5223

Rust CargoCargo can be coerced to share credentials between registries

Risk 40

Severity

2.3

First published (updated )

CVE-2026-5222

rust-lang zipzip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write

Risk 51

Severity

7.3

EPSS

0.09%

First published (updated )

CVE-2025-29787

rust-lang RustRust OS Command Injection/Argument Injection vulnerability

Risk 76

Severity

8.8

First published (updated )

CVE-2024-43402

Nodejs Node.jsCommand injection vulnerability in programing languages on Microsoft Windows operating system.

Risk 61

Severity

9.8

EPSS

0.04%

First published (updated )

CVE-2024-3566

Fedoraproject FedoraRusts's `std::process::Command` did not properly escape arguments of batch files on Windows

Risk 93

Severity

First published (updated )

CVE-2024-24576

rust/rsaRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

Risk 36

Severity

5.9

First published (updated )

CVE-2023-49092

rust/cargoMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

Risk 38

Severity

6.1

First published (updated )

CVE-2023-40030

ubuntu/cargoCargo not respecting umask when extracting crate archives

Risk 59

Severity

7.9

First published (updated )

CVE-2023-38497

rust/cargoCargo did not verify SSH host keys

Risk 36

Severity

5.9

First published (updated )

CVE-2022-46176

rust/cargoExtracting malicious crates can fill the file system

Risk 38

Severity

6.5

First published (updated )

CVE-2022-36114

rust/cargoExtracting malicious crates can corrupt arbitrary files

Risk 60

Severity

8.1

First published (updated )

CVE-2022-36113

Fedoraproject FedoraRegular expression denial of service in Rust's regex crate

Risk 45

Severity

7.5

First published (updated )

CVE-2022-24713

Apple tvOSRace condition in std::fs::remove_dir_all in rustlang

Risk 48

Severity

7.3

First published (updated )

CVE-2022-21658

rust-lang Rustlibrary/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero chara…

Risk 66

Severity

9.1

First published (updated )

CVE-2021-29922

rust-lang RustRace Condition

Risk 35

Severity

5.9

First published (updated )

CVE-2017-20004

Fedoraproject FedoraIn the standard library in Rust before 1.52.0, there is an optimization for joining strings that can…

Risk 54

Severity

8.2

First published (updated )

CVE-2020-36323

rust-lang RustRace Condition

Risk 35

Severity

5.9

First published (updated )

CVE-2018-25008

Fedoraproject FedoraDouble Free

Risk 86

Severity

9.8

First published (updated )

CVE-2021-31162

rust-lang RustBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2015-20001

rust-lang RustIn the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem.…

Risk 43

Severity

7.5

First published (updated )

CVE-2020-36317

rust-lang RustDouble Free, Use After Free

Risk 86

Severity

9.8

First published (updated )

CVE-2020-36318

rust-lang RustBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2021-28877

Fedoraproject FedoraIn the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It c…

Risk 27

Severity

5.3

First published (updated )

CVE-2021-28876

Fedoraproject FedoraBuffer Overflow, Integer Overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2021-28879

rust-lang RustBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2021-28875

Fedoraproject FedoraBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2021-28878

rust-lang Async-h1 RustXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2020-36202

rust-lang Mdbook RustXSS in mdBook's search page

Risk 53

Severity

8.2

First published (updated )

CVE-2020-26297

rust-lang Future-utils RustRace Condition

Risk 28

Severity

4.7

First published (updated )

CVE-2020-35905

Trending

Vendor Risk Score

Software

Rust CargoCrates in third party registries can override the cached source of other crates

Rust CargoCargo can be coerced to share credentials between registries

rust-lang zipzip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write

rust-lang RustRust OS Command Injection/Argument Injection vulnerability

Nodejs Node.jsCommand injection vulnerability in programing languages on Microsoft Windows operating system.

Don't miss critical vulnerabilities

Fedoraproject FedoraRusts's `std::process::Command` did not properly escape arguments of batch files on Windows

rust/rsaRustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels

rust/cargoMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

ubuntu/cargoCargo not respecting umask when extracting crate archives

rust/cargoCargo did not verify SSH host keys

Don't miss critical vulnerabilities

rust/cargoExtracting malicious crates can fill the file system

rust/cargoExtracting malicious crates can corrupt arbitrary files

Fedoraproject FedoraRegular expression denial of service in Rust's regex crate

Apple tvOSRace condition in std::fs::remove_dir_all in rustlang

rust-lang Rustlibrary/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero chara…

Don't miss critical vulnerabilities

rust-lang RustRace Condition

Fedoraproject FedoraIn the standard library in Rust before 1.52.0, there is an optimization for joining strings that can…

rust-lang RustRace Condition

Fedoraproject FedoraDouble Free

rust-lang RustBuffer Overflow

Don't miss critical vulnerabilities

rust-lang RustIn the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem.…

rust-lang RustDouble Free, Use After Free

rust-lang RustBuffer Overflow

Fedoraproject FedoraIn the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It c…

Fedoraproject FedoraBuffer Overflow, Integer Overflow

Don't miss critical vulnerabilities

rust-lang RustBuffer Overflow

Fedoraproject FedoraBuffer Overflow

rust-lang Async-h1 RustXSS

rust-lang Mdbook RustXSS in mdBook's search page

rust-lang Future-utils RustRace Condition

Don't miss critical vulnerabilities

Company

Resources

Contact