rust Summary
Latest vulnerabilities published by rust
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Signature Malleability Vulnerability in Ethereum Crate for Rust
CVE-2025-53359Rust-ethereumEthereum6.9MEDIUMIncomplete fix for CVE-2024-24576 in Rust 1.81.0 allows bypass of mitigations
CVE-2024-43402RustRust8.8HIGHThird-Party Blocks Can Trick Token Generation
CVE-2024-41949biscuit-rustBiscuit-auth6.4MEDIUMRust standard library vulnerable to arbitrary shell command execution
CVE-2024-24576Rust-langRust🥇📈👾🟡EPSS 81%📰10CRITICALErroneous handling of `record_external_operation` error return
CVE-2024-21629Rust-ethereumEvm5.9MEDIUM`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access
CVE-2023-50711Rust-vmmVmm-sys-util5.7MEDIUMDefault functions in VolatileMemory trait lack bounds checks in vm-memory
CVE-2023-41051Rust-vmmVm-memory4.7MEDIUMMalicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
CVE-2023-40030Rust-langCargo6.1MEDIUMCargo not respecting umask when extracting crate archives
CVE-2023-38497Rust-langCargo👾🟡7.8HIGHCargo did not verify SSH host keys
CVE-2022-46176Rust-langCargo5.3MEDIUMrust-vmm linux-loader vulnerable to Out-of-bounds Read
CVE-2022-23523Rust-vmmLinux-loader4MEDIUM(DoS) Denial of Service from unchecked request length in conduit-hyper
CVE-2022-39294Conduit-rustConduit-hyper7.5HIGHevm has incorrect is_static parameter for custom stateful precompiles
CVE-2022-39354Rust-blockchainEvm5.9MEDIUMExtracting malicious crates can corrupt arbitrary files
CVE-2022-36113Rust-langCargo4.6MEDIUMExtracting malicious crates can fill the file system
CVE-2022-36114Rust-langCargo4.8MEDIUMlinked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`
CVE-2022-36086Rust-osdevLinked-list-allocator8.4HIGHJuniper is vulnerable to @DOS GraphQL Nested Fragments overflow
CVE-2022-31173Graphql-rustJuniper7.5HIGHRegular expression denial of service in Rust's regex crate
CVE-2022-24713Rust-langRegex👾🟡7.5HIGHRace condition in std::fs::remove_dir_all in rustlang
CVE-2022-21658Rust-langRust👾🟡7.3HIGHDirectory Traversal Vulnerability in Rust Embedded Crate
CVE-2021-45712Rust-embed ProjectRust-embed7.5HIGHSpecification non-compliance in JUMPI
CVE-2021-41153Rust-blockchainEvm8.7HIGHIP Address Parsing Vulnerability in Rust Programming Language
CVE-2021-29922Rust-langRust9.1CRITICALMemory over-allocation in evm crate
CVE-2021-29511Rust-blockchainEvm6.5MEDIUMSynchronization Issue in Rust Standard Library Leading to Memory Safety Risks
CVE-2017-20004Rust-langRust5.9MEDIUMString Manipulation Vulnerability in Rust Standard Library
CVE-2020-36323Rust-langRust8.2HIGH