crates.io Package Vulnerabilities

All 603 Rust crates with known CVEs, ranked by live CVE volume — 1,162 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 51.apache-avro3 CVEs
  2. 52.arr3 CVEs
  3. 53.astral-tokio-tar3 CVEs
  4. 54.biscuit-auth3 CVEs
  5. 55.cgc3 CVEs
  6. 56.ckb3 CVEs
  7. 57.crossbeam-channel3 CVEs
  8. 58.fltk3 CVEs
  9. 59.gix-index3 CVEs
  10. 60.gix-path3 CVEs
  11. 61.gix-worktree3 CVEs
  12. 62.grin3 CVEs
  13. 63.id-map3 CVEs
  14. 64.lettre3 CVEs
  15. 65.mongodb3 CVEs
  16. 66.nimiq-blockchain3 CVEs
  17. 67.pallet-ethereum3 CVEs
  18. 68.raw-cpuid3 CVEs
  19. 69.risc0-zkvm3 CVEs
  20. 70.sequoia-openpgp3 CVEs
  21. 71.slice-deque3 CVEs
  22. 72.sm23 CVEs
  23. 73.solana_rbpf3 CVEs
  24. 74.static-web-server3 CVEs
  25. 75.tokio3 CVEs
  26. 76.tremor-script3 CVEs
  27. 77.ursa3 CVEs
  28. 78.wasm33 CVEs
  29. 79.yamux3 CVEs
  30. 80.youki3 CVEs
  31. 81.zebra-chain3 CVEs
  32. 82.zebra-consensus3 CVEs
  33. 83.zebra-network3 CVEs
  34. 84.zebra-script3 CVEs
  35. 85.abi_stable2 CVEs
  36. 86.acc_reader2 CVEs
  37. 87.activitypub_federation2 CVEs
  38. 88.actix-files2 CVEs
  39. 89.ammonia2 CVEs
  40. 90.arenavec2 CVEs
  41. 91.arti2 CVEs
  42. 92.async-h12 CVEs
  43. 93.aws-lc-fips-sys2 CVEs
  44. 94.boxlite2 CVEs
  45. 95.boxlite-cli2 CVEs
  46. 96.brotli-sys2 CVEs
  47. 97.cache2 CVEs
  48. 98.cggmp212 CVEs
  49. 99.cggmp242 CVEs
  50. 100.cmov2 CVEs

Which crates.io packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Start Free Scan →