What’s Vulnerable › Products

rust-lang cargo vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your rust-lang cargo version is affected

Latest rust-lang cargo vulnerabilities

• CVE-2026-5223 — Crates in third party registries can override the cached source of other crates (CVSS 5.3)
• CVE-2026-5222 — Cargo can be coerced to share credentials between registries (CVSS 6.5)
• CVE-2023-38497 — Cargo not respecting umask when extracting crate archives (CVSS 7.3)
• CVE-2022-46176 — Cargo did not verify SSH host keys (CVSS 5.9)
• CVE-2022-36114 — Extracting malicious crates can fill the file system (CVSS 6.5)
• CVE-2022-36113 — Extracting malicious crates can corrupt arbitrary files (CVSS 8.1)