Vulnerabilities

TI-2026-79968 CVE-2026-115567 · GHSA-5wjr-9356-4wc8

Race condition in Tokio time Interval can cause use-after-free

LOW 27

Tokio is a runtime for writing applications with Rust.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00111 Published 2026-10-23 Partial fix · 1.54.1 CWE-362

TI-2026-20650 CVE-2026-25541 · GHSA-434x-w66g-qw3r

MEDIUM 58

Bytes is a utility library for working with bytes.

CVSS 4.0MEDIUM 5.5 Local No auth No interaction EPSS 0.00601 Published 2026-02-04 Fixed in 1.11.1 CWE-680

TI-2025-35976 CVE-2025-58160 · GHSA-xwfj-jgwm-7wp5

LOW 18

tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00341 Published 2025-08-29 Partial fix · 0.3.20 CWE-150

TI-2025-34841 CVE-2025-55159 · GHSA-qx2v-8332-m4fv

LOW 22

slab is a pre-allocated storage for a uniform data type.

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00185 Published 2025-08-11 Partial fix · 0.4.11 CWE-119

TI-2024-18146 CVE-2024-27308 · GHSA-r8w9-5wcg-vfj7

HIGH 78

Mio is a Metal I/O library for Rust.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00881 Published 2024-03-06 Fixed in 0.8.11 CWE-416

TI-2023-08715 CVE-2023-22466 · GHSA-7rrj-xr53-82p7

LOW 25

Tokio is a runtime for writing applications with Rust.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00612 Published 2023-01-04 Fixed in 1.18.4, 1.20.3 +1 CWE-665

TI-2022-02967 CVE-2022-3212 · GHSA-m77f-652q-wwp4

LOW 35

<bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2022-09-14 Fixed in 0.2.8, 0.3.0-rc.2 CWE-770