crates.io Package Vulnerabilities

All 626 Rust crates with known CVEs, ranked by live CVE volume — 1,294 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.aws-lc-fips-sys2 CVEs
  2. 102.biscuit-auth2 CVEs
  3. 103.boxlite2 CVEs
  4. 104.boxlite-cli2 CVEs
  5. 105.brotli-sys2 CVEs
  6. 106.buffa2 CVEs
  7. 107.cache2 CVEs
  8. 108.cggmp212 CVEs
  9. 109.cggmp242 CVEs
  10. 110.cmov2 CVEs
  11. 111.compu-brotli-sys2 CVEs
  12. 112.coreos-installer2 CVEs
  13. 113.deepseek-tui-cli2 CVEs
  14. 114.deno_node2 CVEs
  15. 115.failure2 CVEs
  16. 116.flatbuffers2 CVEs
  17. 117.fulgur2 CVEs
  18. 118.futures-task2 CVEs
  19. 119.futures-util2 CVEs
  20. 120.generator2 CVEs
  21. 121.gix-fs2 CVEs
  22. 122.gix-pack2 CVEs
  23. 123.gix-ref2 CVEs
  24. 124.http2 CVEs
  25. 125.image2 CVEs
  26. 126.internment2 CVEs
  27. 127.lemmy_api_common2 CVEs
  28. 128.libp2p-gossipsub2 CVEs
  29. 129.libp2p-rendezvous2 CVEs
  30. 130.librsvg2 CVEs
  31. 131.libsecp256k12 CVEs
  32. 132.matrix-sdk-base2 CVEs
  33. 133.mio2 CVEs
  34. 134.ml-dsa2 CVEs
  35. 135.nanorand2 CVEs
  36. 136.ncurses2 CVEs
  37. 137.net22 CVEs
  38. 138.netavark2 CVEs
  39. 139.nimiq-keys2 CVEs
  40. 140.nimiq-transaction2 CVEs
  41. 141.ntpd2 CVEs
  42. 142.opcua2 CVEs
  43. 143.ordnung2 CVEs
  44. 144.ozone2 CVEs
  45. 145.pageant2 CVEs
  46. 146.pallet-evm-precompile-modexp2 CVEs
  47. 147.pgp2 CVEs
  48. 148.phonenumber2 CVEs
  49. 149.protobuf2 CVEs
  50. 150.pyo32 CVEs

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →