crates.io Package Vulnerabilities

All 559 Rust crates with known CVEs, ranked by live CVE volume — 1,019 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 451.russh-cryptovec1 CVE
  2. 452.rust-embed1 CVE
  3. 453.rustix1 CVE
  4. 454.safe-transmute1 CVE
  5. 455.sccache1 CVE
  6. 456.scim_proto1 CVE
  7. 457.scottqueue1 CVE
  8. 458.scratchpad1 CVE
  9. 459.scsir1 CVE
  10. 460.sd1 CVE
  11. 461.security-framework1 CVE
  12. 462.serde_cbor1 CVE
  13. 463.serde-json-wasm1 CVE
  14. 464.serde_v81 CVE
  15. 465.sha21 CVE
  16. 466.shamefile1 CVE
  17. 467.shlex1 CVE
  18. 468.signal-simple1 CVE
  19. 469.simd-json1 CVE
  20. 470.simple_asn11 CVE
  21. 471.slab1 CVE
  22. 472.slock1 CVE
  23. 473.smallbitvec1 CVE
  24. 474.snow1 CVE
  25. 475.soroban-fixed-point-math1 CVE
  26. 476.soroban-poseidon1 CVE
  27. 477.soroban-sdk1 CVE
  28. 478.sp1_prover1 CVE
  29. 479.sp1_recursion_circuit1 CVE
  30. 480.sp1_sdk1 CVE
  31. 481.spin1 CVE
  32. 482.spin-sdk1 CVE
  33. 483.spytrap-adb1 CVE
  34. 484.sqlite-vec1 CVE
  35. 485.sqlpage1 CVE
  36. 486.stack1 CVE
  37. 487.stackvector1 CVE
  38. 488.starship1 CVE
  39. 489.stellar-strkey1 CVE
  40. 490.string-interner1 CVE
  41. 491.SurrealDB1 CVE
  42. 492.svix1 CVE
  43. 493.syncpool1 CVE
  44. 494.sys-info1 CVE
  45. 495.Tauri1 CVE
  46. 496.tauri-cli1 CVE
  47. 497.tauri-plugin-shell1 CVE
  48. 498.tectonic_xdv1 CVE
  49. 499.telemetry1 CVE
  50. 500.tendermint-light-client1 CVE

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →