Known Vulnerabilities for Rust by Rust-lang
Listed below are 10 of the newest known vulnerabilities associated with "Rust" by "Rust-lang".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-89764 json | In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers Ther... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-88024 json | Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause ... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-87528 json | Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute... | Not Provided | 2026-09-09 | 2026-09-10 |
| CVE-2026-85670 json | tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-82635 json | Pake before 3.13.1 joins the JavaScript-supplied filename for the download_file Tauri command onto the user's Downloads direc... | Not Provided | 2026-08-30 | 2026-08-31 |
| CVE-2026-82453 json | rust-iot-platform through commit 5df942ab stores user passwords in cleartext without hashing in the user model. Attackers can... | Not Provided | 2026-08-29 | 2026-08-31 |
| CVE-2026-82452 json | rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack aut... | Not Provided | 2026-08-29 | 2026-09-01 |
| CVE-2026-82253 json | gitoxide (Rust crates gix <= 0.72.0 and gix-validate <= 0.10.0) contains a path traversal vulnerability. The submodule name v... | Not Provided | 2026-08-28 | 2026-08-31 |
| CVE-2026-81526 json | The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in ... | Not Provided | 2026-08-27 | 2026-08-28 |
| CVE-2026-77651 json | The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, beca... | Not Provided | 2026-08-21 | 2026-08-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Rust-lang | Rust | 1.9.0 | |||
| Application | Rust-lang | Rust | 1.8.0 | |||
| Application | Rust-lang | Rust | 1.7.0 | |||
| Application | Rust-lang | Rust | 1.6.0 | |||
| Application | Rust-lang | Rust | 1.5.0 | |||
| Application | Rust-lang | Rust | 1.46.0 | |||
| Application | Rust-lang | Rust | 1.4.0 | |||
| Application | Rust-lang | Rust | 1.34.2 | |||
| Application | Rust-lang | Rust | 1.34.1 | |||
| Application | Rust-lang | Rust | 1.34.0 | |||
| Application | Rust-lang | Rust | 1.33.0 | |||
| Application | Rust-lang | Rust | 1.32.0 | |||
| Application | Rust-lang | Rust | 1.31.1 | |||
| Application | Rust-lang | Rust | 1.31.0 | |||
| Application | Rust-lang | Rust | 1.30.1 | |||
| Application | Rust-lang | Rust | 1.30.0 | |||
| Application | Rust-lang | Rust | 1.3.0 | |||
| Application | Rust-lang | Rust | 1.29.2 | |||
| Application | Rust-lang | Rust | 1.29.1 | |||
| Application | Rust-lang | Rust | 1.29.0 |