Fixed in
Check your version
rustc --versionCVEs affecting 1.34
| CVE | Title | CVSS | Exploited | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2024-24576 | Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows | 10.0 | — | 2024-04-09 | |
| CVE-2024-3566 | Command injection vulnerability in programing languages on Microsoft Windows operating system. | 9.8 | — | 2024-04-10 | |
| CVE-2021-28879 | In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an i... | 9.8 | — | 2021-04-11 | |
| CVE-2021-29922 | library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at t... | 9.1 | — | 2021-08-07 | |
| CVE-2024-43402 | Rust OS Command Injection/Argument Injection vulnerability | 8.8 | — | 2024-09-04 | |
| CVE-2020-36323 | In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uni... | 8.2 | — | 2021-04-14 | |
| CVE-2019-12083 | The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if ove... | 8.1 | — | 2019-05-13 | |
| CVE-2021-28875 | In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in a... | 7.5 | — | 2021-04-11 | |
| CVE-2021-28877 | In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the... | 7.5 | — | 2021-04-11 | |
| CVE-2021-28878 | In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more th... | 7.5 | — | 2021-04-11 | |
| CVE-2020-36317 | In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows... | 7.5 | — | 2021-04-11 | |
| CVE-2022-21658 | Race condition in std::fs::remove_dir_all in rustlang | 6.3 | — | 2022-01-20 | |
| CVE-2021-28876 | In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __ite... | 5.3 | — | 2021-04-11 |
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.
Data: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (see EPSS at https://www.first.org/epss), endoflife.date. Software list: awesome-selfhosted (CC BY-SA 3.0).