Vendor
Tokio-rs
7 known vulnerabilities in products by Tokio-rs, 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-25541 | Bytes is vulnerable to integer overflow in BytesMut::reserve | 7.5 | |
| High | CVE-2022-3212 | DoS in axum-core due to missing request size limit | 7.5 | |
| Critical | CVE-2024-27308 | Mio's tokens for named pipes may be delivered after deregistration | 7.5 | |
| Medium | CVE-2026-115567 | Tokio: Race condition in `tokio::time::Interval` | — | |
| Medium | CVE-2023-22466 | Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipe | 5.4 | |
| Medium | CVE-2025-55159 | slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check | — | |
| Low | CVE-2025-58160 | Tracing logging user input may result in poisoning logs with ANSI escape sequences | — |