crates.io Package Vulnerabilities

All 563 Rust crates with known CVEs, ranked by live CVE volume — 1,061 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.gix-ref2 CVEs
  2. 102.gix-transport2 CVEs
  3. 103.http2 CVEs
  4. 104.image2 CVEs
  5. 105.internment2 CVEs
  6. 106.lemmy_api_common2 CVEs
  7. 107.libp2p-gossipsub2 CVEs
  8. 108.libp2p-rendezvous2 CVEs
  9. 109.libsecp256k12 CVEs
  10. 110.matrix-sdk-base2 CVEs
  11. 111.mio2 CVEs
  12. 112.ml-dsa2 CVEs
  13. 113.nanorand2 CVEs
  14. 114.ncurses2 CVEs
  15. 115.net22 CVEs
  16. 116.netavark2 CVEs
  17. 117.nimiq-keys2 CVEs
  18. 118.nimiq-transaction2 CVEs
  19. 119.ntpd2 CVEs
  20. 120.opcua2 CVEs
  21. 121.ordnung2 CVEs
  22. 122.ozone2 CVEs
  23. 123.pallet-evm-precompile-modexp2 CVEs
  24. 124.pgp2 CVEs
  25. 125.phonenumber2 CVEs
  26. 126.pingora-core2 CVEs
  27. 127.protobuf2 CVEs
  28. 128.pyo32 CVEs
  29. 129.qdrant2 CVEs
  30. 130.rand_core2 CVEs
  31. 131.reorder2 CVEs
  32. 132.risc0-circuit-rv32im2 CVEs
  33. 133.rocket2 CVEs
  34. 134.rsa2 CVEs
  35. 135.rulex2 CVEs
  36. 136.rustls2 CVEs
  37. 137.salvo2 CVEs
  38. 138.simple-slab2 CVEs
  39. 139.slack-morphism2 CVEs
  40. 140.socket22 CVEs
  41. 141.sodiumoxide2 CVEs
  42. 142.stack_dst2 CVEs
  43. 143.static-web-server2 CVEs
  44. 144.streebog2 CVEs
  45. 145.theshit2 CVEs
  46. 146.time2 CVEs
  47. 147.toodee2 CVEs
  48. 148.tor-circmgr2 CVEs
  49. 149.tuftool2 CVEs
  50. 150.vm-memory2 CVEs

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →