Tokio-Rs
6 CVEs across 6 Tokio-Rs products. Browse Tokio-Rs vulnerabilities, severities, and proof-of-concept exploits.
Tokio-Rs products with known CVEs
Tokio-Rs CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-25541 | High | 7.5 | 2026-02-04 | Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the un… |
CVE-2025-58160 | | | 2025-08-29 | tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber w… |
CVE-2025-55159 | | | 2025-08-11 | slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the get_disjoint_mut method incorrectly checked if indices were within the slab's c… |
CVE-2024-27308 | High | 7.5 | 2024-03-06 | Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes… |
CVE-2023-22466 | Medium | 5.4 | 2023-01-04 | Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows… |
CVE-2022-3212 | High | 7.5 | 2022-09-14 | <bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body. That meant if a malicious… |