rust-lang vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20224
3. 20233
4. 20242

Newest CVEs

• CVE-2024-43402

  Rust OS Command Injection/Argument Injection vulnerability

  rust-lang · rust

  High8.2
• CVE-2024-24576

  Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows

  rust-lang · rust

  Critical10.0
• CVE-2023-40030

  Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

  rust-lang · cargo

  Medium6.1
• CVE-2023-38497

  Cargo not respecting umask when extracting crate archives

  rust-lang · cargo

  High7.8
• CVE-2022-46176

  Cargo did not verify SSH host keys

  rust-lang · cargo

  Medium5.3
• CVE-2022-36114

  Extracting malicious crates can fill the file system

  rust-lang · cargo

  Medium4.8
• CVE-2022-36113

  Extracting malicious crates can corrupt arbitrary files

  rust-lang · cargo

  Medium4.6
• CVE-2022-24713

  Regular expression denial of service in Rust's regex crate

  rust-lang · regex

  High7.5
• CVE-2022-21658

  Race condition in std::fs::remove_dir_all in rustlang

  rust-lang · rust

  High7.3
• CVE-2020-26297

  XSS in mdBook's search page

  rust-lang · mdBook

  High8.2