crates.io Package Vulnerabilities

All 590 Rust crates with known CVEs, ranked by live CVE volume — 1,118 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 551.unbounded-spsc1 CVE
  2. 552.unicycle1 CVE
  3. 553.untrusted1 CVE
  4. 554.users1 CVE
  5. 555.uucore1 CVE
  6. 556.uu_cp1 CVE
  7. 557.uu_kill1 CVE
  8. 558.uu_ln1 CVE
  9. 559.uu_mkdir1 CVE
  10. 560.uu_mkfifo1 CVE
  11. 561.uu_mknod1 CVE
  12. 562.uu_mktemp1 CVE
  13. 563.uu_mv1 CVE
  14. 564.uu_od1 CVE
  15. 565.uu_printenv1 CVE
  16. 566.v91 CVE
  17. 567.va-ts1 CVE
  18. 568.vec-const1 CVE
  19. 569.versionize1 CVE
  20. 570.vmm-sys-util1 CVE
  21. 571.vproxy1 CVE
  22. 572.wasmer1 CVE
  23. 573.wasmer-cli1 CVE
  24. 574.wasmtime-c-api-impl1 CVE
  25. 575.webbrowser1 CVE
  26. 576.webp1 CVE
  27. 577.web-push1 CVE
  28. 578.websocket1 CVE
  29. 579.wgp1 CVE
  30. 580.windmill-api1 CVE
  31. 581.ws1 CVE
  32. 582.xml-rs1 CVE
  33. 583.yaml-rust1 CVE
  34. 584.yamux1 CVE
  35. 585.yottadb1 CVE
  36. 586.zcash_primitives1 CVE
  37. 587.zeroize_derive1 CVE
  38. 588.zincati1 CVE
  39. 589.zip1 CVE
  40. 590.zola1 CVE

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →