Check your version
rustc --versionAffected version lines
- 1.77 3 CVEs End of life
- 1.72 3 CVEs End of life
- 1.60 4 CVEs End of life
- 1.58 4 CVEs End of life
- 1.53 4 CVEs End of life
- 1.52 5 CVEs End of life
- 1.51 10 CVEs End of life
- 1.50 11 CVEs End of life
- 1.49 12 CVEs End of life
- 1.48 14 CVEs End of life
- 1.34 13 CVEs End of life
- 1.30 12 CVEs End of life
- 1.29 14 CVEs End of life
- 1.28 15 CVEs
- 1.27 16 CVEs
- 1.26 16 CVEs
- 1.22 16 CVEs
- 1.19 17 CVEs
- 1.18 18 CVEs
- 1.3 17 CVEs
- 1.2 16 CVEs
- 1.0 17 CVEs
- 0.8 16 CVEs
Known vulnerabilities
| CVE | Title | Affected versions | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|---|
| CVE-2024-43402 | Rust OS Command Injection/Argument Injection vulnerability | < 1.81.0 | 8.8 | — | 2024-09-04 | |
| CVE-2024-3566 | Command injection vulnerability in programing languages on Microsoft Windows operating system. | < 1.77.2 | 9.8 | — | 2024-04-10 | |
| CVE-2024-24576 | Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows | < 1.77.2 | 10.0 | — | 2024-04-09 | |
| CVE-2023-40030 | Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports | ≥ 1.60.0 < 1.72.0 | 6.1 | — | 2023-08-24 | |
| CVE-2022-21658 | Race condition in std::fs::remove_dir_all in rustlang | ≥ 1.0.0 ≤ 1.58.0 | 6.3 | — | 2022-01-20 | |
| CVE-2021-29922 | library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at t... | < 1.53.0 | 9.1 | — | 2021-08-07 | |
| CVE-2020-36323 | In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uni... | < 1.52.0 | 8.2 | — | 2021-04-14 | |
| CVE-2021-31162 | In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freei... | ≥ 1.48.0 < 1.52.0 | 9.8 | — | 2021-04-14 | |
| CVE-2017-20004 | In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. Mu... | < 1.19.0 | 5.9 | — | 2021-04-14 | |
| CVE-2018-25008 | In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This... | < 1.29.0 | 5.9 | — | 2021-04-14 | |
| CVE-2015-20001 | In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inco... | < 1.2.0 | 7.5 | — | 2021-04-11 | |
| CVE-2020-36317 | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows... | < 1.49.0 | 7.5 | — | 2021-04-11 | |
| CVE-2020-36318 | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element... | ≥ 1.48.0 < 1.49.0 | 9.8 | — | 2021-04-11 | |
| CVE-2021-28875 | In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in a... | < 1.50.0 | 7.5 | — | 2021-04-11 | |
| CVE-2021-28876 | In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __ite... | < 1.52.0 | 5.3 | — | 2021-04-11 | |
| CVE-2021-28877 | In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the... | < 1.51.0 | 7.5 | — | 2021-04-11 | |
| CVE-2021-28878 | In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more th... | < 1.52.0 | 7.5 | — | 2021-04-11 | |
| CVE-2021-28879 | In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an i... | < 1.52.0 | 9.8 | — | 2021-04-11 | |
| CVE-2019-16760 | Cargo prior to Rust 1.26.0 may download the wrong dependency | < 1.26.0 | 7.5 | — | 2019-09-30 | |
| CVE-2019-1010299 | The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure.... | ≥ 1.18.0 < 1.30.0 | 5.3 | — | 2019-07-15 | |
| CVE-2019-12083 | The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if ove... | ≥ 1.34.0 < 1.34.2 | 8.1 | — | 2019-05-13 | |
| CVE-2018-1000810 | The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 12... | = 1.26.0 = 1.26.1 = 1.26.2 | 9.8 | — | 2018-10-08 | |
| CVE-2018-1000657 | Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and la... | ≥ 1.3.0 < 1.22.0 | 7.8 | — | 2018-08-20 | |
| CVE-2018-1000622 | The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search P... | ≥ 0.8 ≤ 1.27.0 | 7.8 | — | 2018-07-09 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).