Rust-Lang

16 CVEs across 8 Rust-Lang products. Browse Rust-Lang vulnerabilities, severities, and proof-of-concept exploits.

Rust-Lang products with known CVEs

ProductCVEs
Rust24
Cargo7
Async-H12
Futures-Task2
Future-Utils2
Mdbook1
Regex1
Socket21
Rust-Lang CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-5223Medium5.32026-05-25Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of a…
CVE-2026-5222Medium6.52026-05-25Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple r…
CVE-2024-43402High8.12024-09-04Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments when invoking batch files on Windows, w…
CVE-2024-3566Critical9.82024-04-10A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function whe…
CVE-2024-24576Critical10.02024-04-09Rust is a programming language. The Rust Security Response WG was notified that the Rust standard library prior to version 1.77.2 did not properly escape argum…
CVE-2023-40030Medium6.12023-08-24Cargo downloads a Rust project’s dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names whe…
CVE-2023-38497High7.92023-08-04Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not res…
CVE-2022-46176Medium5.32023-01-11Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and depen…
CVE-2022-36114Medium4.82022-09-14Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives…
CVE-2022-36113Medium4.62022-09-14Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the ~/.cargo folder on disk, mak…
CVE-2022-24713High7.52022-03-08regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks cau…
CVE-2022-21658High7.32022-01-20Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG…
CVE-2021-29922Critical9.12021-08-07library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in s…
CVE-2021-31162Critical9.82021-04-14In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
CVE-2020-36323High8.22021-04-14In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to…
CVE-2018-25008Medium5.92021-04-14In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchronization issue can be lead to memory safet…
CVE-2017-20004Medium5.92021-04-14In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any typ…
CVE-2021-28879Critical9.82021-04-11In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer ov…
CVE-2021-28878High7.52021-04-11In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditi…
CVE-2021-28877High7.52021-04-11In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug…
CVE-2021-28876Medium5.32021-04-11In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same…
CVE-2021-28875High7.52021-04-11In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer…
CVE-2020-36318Critical9.82021-04-11In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug…
CVE-2020-36317High7.52021-04-11In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the pro…
CVE-2015-20001High7.52021-04-11In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic ele…
CVE-2020-36202Medium6.12021-01-26An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.
CVE-2020-26297High8.22021-01-04mdBook is a utility to create modern online books from Markdown files and is written in Rust. In mdBook before version 0.4.5, there is a vulnerability affectin…
CVE-2020-35920Medium5.52020-12-31An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation.
CVE-2020-35908Medium5.52020-12-31An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled.
CVE-2020-35907Medium5.52020-12-31An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference.
CVE-2020-35906High7.82020-12-31An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation.
CVE-2020-35905Medium4.72020-12-31An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code).
CVE-2020-26281Medium6.82020-12-21async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerabili…
CVE-2019-16760Medium4.62019-09-30Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key. Usage of the `package` key to rena…
CVE-2019-1010299Medium5.32019-07-15The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory…
CVE-2019-12083High8.12019-05-13The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, can violate Rust's safety guarantees and…
CVE-2018-1000810Critical9.82018-10-08The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffe…
CVE-2018-1000657High7.82018-08-20Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stable release 1.3.0 and later contains a Bu…
CVE-2018-1000622High7.82018-07-09The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that…