Known Vulnerabilities for Rust by Rust-lang
Listed below are 10 of the newest known vulnerabilities associated with "Rust" by "Rust-lang".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103241 json | A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-102825 json | Russh is a Rust SSH client and server library. Prior to 0.62.6, the USERAUTH_REQUEST path reached from server::run_stream in ... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102824 json | Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-102823 json | Russh is a Rust SSH client and server library. Prior to 0.63.1, client_read_authenticated in russh/src/client/encrypted.rs fo... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102822 json | Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it w... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-102821 json | Russh is a Rust SSH client and server library. Prior to 0.63.2, an authenticated remote peer can send SSH_MSG_KEXINIT without... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-101044 json | pacquet, the Rust package-manager component shipped in the pnpm npm package versions >=12.0.0-alpha.0 and <12.0.0-alpha.5, do... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-100652 json | vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100650 json | vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-93601 json | rustls-webpki (the Rust webpki fork used by rustls) versions >= 0.101.0 and prior to 0.103.12 and 0.104.0-alpha.6 incorrectly... | Not Provided | 2026-09-18 | 2026-09-18 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Rust-lang | Rust | 1.9.0 | |||
| Application | Rust-lang | Rust | 1.8.0 | |||
| Application | Rust-lang | Rust | 1.7.0 | |||
| Application | Rust-lang | Rust | 1.6.0 | |||
| Application | Rust-lang | Rust | 1.5.0 | |||
| Application | Rust-lang | Rust | 1.46.0 | |||
| Application | Rust-lang | Rust | 1.4.0 | |||
| Application | Rust-lang | Rust | 1.34.2 | |||
| Application | Rust-lang | Rust | 1.34.1 | |||
| Application | Rust-lang | Rust | 1.34.0 | |||
| Application | Rust-lang | Rust | 1.33.0 | |||
| Application | Rust-lang | Rust | 1.32.0 | |||
| Application | Rust-lang | Rust | 1.31.1 | |||
| Application | Rust-lang | Rust | 1.31.0 | |||
| Application | Rust-lang | Rust | 1.30.1 | |||
| Application | Rust-lang | Rust | 1.30.0 | |||
| Application | Rust-lang | Rust | 1.3.0 | |||
| Application | Rust-lang | Rust | 1.29.2 | |||
| Application | Rust-lang | Rust | 1.29.1 | |||
| Application | Rust-lang | Rust | 1.29.0 |