TI-2024-18146 CVE-2024-27308 · GHSA-r8w9-5wcg-vfj7
Mio's tokens for named pipes may be delivered after deregistration
Priority HIGH 78
Mio is a Metal I/O library for Rust.
tokio-rs
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
tokio-rs records in CISA KEVNo tokio-rs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-20650 CVE-2026-25541 · GHSA-434x-w66g-qw3r
Bytes is vulnerable to integer overflow in BytesMut::reserve
Priority MEDIUM 58
Bytes is a utility library for working with bytes.
TI-2022-02967 CVE-2022-3212 · GHSA-m77f-652q-wwp4
DoS in axum-core due to missing request size limit
Priority LOW 35
<bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body.
TI-2026-79968 CVE-2026-115567 · GHSA-5wjr-9356-4wc8
Race condition in Tokio time Interval can cause use-after-free
Priority LOW 27
Tokio is a runtime for writing applications with Rust.
TI-2023-08715 CVE-2023-22466 · GHSA-7rrj-xr53-82p7
Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipe
Priority LOW 25
Tokio is a runtime for writing applications with Rust.
TI-2025-34841 CVE-2025-55159 · GHSA-qx2v-8332-m4fv
slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check
Priority LOW 22
slab is a pre-allocated storage for a uniform data type.
TI-2025-35976 CVE-2025-58160 · GHSA-xwfj-jgwm-7wp5
Tracing logging user input may result in poisoning logs with ANSI escape sequences
Priority LOW 18
tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information.