Product by Rust

    Rust Cargo

    8 known vulnerabilities in Rust Cargo (Rust), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Rust Cargo (Rust)
    HighCVE-2023-38497

    Cargo not respecting umask when extracting crate archives

    also in 1 other product

    		7.8
    MediumCVE-2026-5222

    Cargo can be coerced to share credentials between registries

    also in 1 other product

    		6.5
    MediumCVE-2023-40030

    Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

    also in 1 other product

    		6.1
    HighCVE-2019-16760

    Cargo prior to Rust 1.26.0 may download the wrong dependency

    also in 2 other products

    		4.6
    HighCVE-2022-36113

    Extracting malicious crates can corrupt arbitrary files

    		4.6
    MediumCVE-2022-36114

    Extracting malicious crates can fill the file system

    		4.8
    MediumCVE-2026-5223

    Crates in third party registries can override the cached source of other crates

    		5.3
    MediumCVE-2022-46176

    Cargo did not verify SSH host keys

    		5.3

    All products by Rust