crates.io Package Vulnerabilities

All 630 Rust crates with known CVEs, ranked by live CVE volume — 1,339 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.opentelemetry_sdk1 CVE
  2. 452.openvm1 CVE
  3. 453.orchard1 CVE
  4. 454.ordered-float1 CVE
  5. 455.orion1 CVE
  6. 456.os_str_bytes1 CVE
  7. 457.ostree1 CVE
  8. 458.ouch1 CVE
  9. 459.outer_cgi1 CVE
  10. 460.p3-challenger1 CVE
  11. 461.pagefind1 CVE
  12. 462.pancurses1 CVE
  13. 463.parc1 CVE
  14. 464.parse_duration1 CVE
  15. 465.pingora-cache1 CVE
  16. 466.pingora-proxy1 CVE
  17. 467.pleezer1 CVE
  18. 468.plonky21 CVE
  19. 469.pnet1 CVE
  20. 470.portaudio1 CVE
  21. 471.portaudio-rs1 CVE
  22. 472.postscript1 CVE
  23. 473.process_lock1 CVE
  24. 474.process-sync1 CVE
  25. 475.prompty1 CVE
  26. 476.prost1 CVE
  27. 477.prost-types1 CVE
  28. 478.pubnub1 CVE
  29. 479.quinn1 CVE
  30. 480.qwutils1 CVE
  31. 481.rattler1 CVE
  32. 482.rattler_cache1 CVE
  33. 483.rcu_cell1 CVE
  34. 484.rdiff1 CVE
  35. 485.redlib1 CVE
  36. 486.reffers1 CVE
  37. 487.regex1 CVE
  38. 488.renderdoc1 CVE
  39. 489.rgb1 CVE
  40. 490.rhai1 CVE
  41. 491.ring1 CVE
  42. 492.rio1 CVE
  43. 493.ripgrep1 CVE
  44. 494.risc0-aggregation1 CVE
  45. 495.risc0-circuit-rv32im-sys1 CVE
  46. 496.risc0-ethereum-contracts1 CVE
  47. 497.risc0-zkos-v1compat1 CVE
  48. 498.risc0-zkvm-platform1 CVE
  49. 499.rkyv1 CVE
  50. 500.rojo1 CVE

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →