crates.io Package Vulnerabilities

All 630 Rust crates with known CVEs, ranked by live CVE volume — 1,339 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 601.uu_mktemp1 CVE
  2. 602.uu_mv1 CVE
  3. 603.uu_od1 CVE
  4. 604.uu_printenv1 CVE
  5. 605.v91 CVE
  6. 606.va-ts1 CVE
  7. 607.vec-const1 CVE
  8. 608.versionize1 CVE
  9. 609.vmm-sys-util1 CVE
  10. 610.vproxy1 CVE
  11. 611.wasmer1 CVE
  12. 612.wasmer-cli1 CVE
  13. 613.wasmtime-c-api-impl1 CVE
  14. 614.webbrowser1 CVE
  15. 615.webp1 CVE
  16. 616.webpki-root-certs1 CVE
  17. 617.webpki-roots1 CVE
  18. 618.web-push1 CVE
  19. 619.websocket1 CVE
  20. 620.wgp1 CVE
  21. 621.windmill-api1 CVE
  22. 622.ws1 CVE
  23. 623.xml-rs1 CVE
  24. 624.yaml-rust1 CVE
  25. 625.yottadb1 CVE
  26. 626.zbus_polkit1 CVE
  27. 627.zcash_primitives1 CVE
  28. 628.zeroize_derive1 CVE
  29. 629.zincati1 CVE
  30. 630.zola1 CVE

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →