crates.io Package Vulnerabilities

All 590 Rust crates with known CVEs, ranked by live CVE volume — 1,119 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 101.futures-task2 CVEs
  2. 102.futures-util2 CVEs
  3. 103.generator2 CVEs
  4. 104.gix-fs2 CVEs
  5. 105.gix-ref2 CVEs
  6. 106.gix-transport2 CVEs
  7. 107.http2 CVEs
  8. 108.image2 CVEs
  9. 109.internment2 CVEs
  10. 110.lemmy_api_common2 CVEs
  11. 111.libp2p-gossipsub2 CVEs
  12. 112.libp2p-rendezvous2 CVEs
  13. 113.libsecp256k12 CVEs
  14. 114.matrix-sdk-base2 CVEs
  15. 115.mio2 CVEs
  16. 116.ml-dsa2 CVEs
  17. 117.nanorand2 CVEs
  18. 118.ncurses2 CVEs
  19. 119.net22 CVEs
  20. 120.netavark2 CVEs
  21. 121.nimiq-keys2 CVEs
  22. 122.nimiq-transaction2 CVEs
  23. 123.ntpd2 CVEs
  24. 124.opcua2 CVEs
  25. 125.ordnung2 CVEs
  26. 126.ozone2 CVEs
  27. 127.pallet-evm-precompile-modexp2 CVEs
  28. 128.pgp2 CVEs
  29. 129.phonenumber2 CVEs
  30. 130.pingora-core2 CVEs
  31. 131.protobuf2 CVEs
  32. 132.pyo32 CVEs
  33. 133.qdrant2 CVEs
  34. 134.rand_core2 CVEs
  35. 135.ratex-parser2 CVEs
  36. 136.reorder2 CVEs
  37. 137.risc0-circuit-rv32im2 CVEs
  38. 138.rocket2 CVEs
  39. 139.rsa2 CVEs
  40. 140.rulex2 CVEs
  41. 141.rustls2 CVEs
  42. 142.salvo2 CVEs
  43. 143.simple-slab2 CVEs
  44. 144.slack-morphism2 CVEs
  45. 145.socket22 CVEs
  46. 146.sodiumoxide2 CVEs
  47. 147.stack_dst2 CVEs
  48. 148.static-web-server2 CVEs
  49. 149.streebog2 CVEs
  50. 150.theshit2 CVEs

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →