{"schema_version":1,"title":"crates.io package vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 2,199 vulnerabilities in crates.io packages: 14 in the last 7 days and 356 in the last 90 days, 26 of them critical and 1 exploited in the wild. The most recent, VirusTotal yara-x unvalidated deserialization in Rules::deserialize, was published on 24 September 2026. 169 packages have a page of their own.","url":"https://junglewise.ai/threats/vendors/crates-io","json_url":"https://junglewise.ai/threats/vendors/crates-io.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/crates-io","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":120,"all_time":2199,"critical":26,"exploited":1,"last_7_days":14,"last_30_days":68,"last_90_days":356,"last_365_days":946},"latest":[{"slug":"virustotal-yara-x-unvalidated-deserialization-in-rules-deserialize-d5769253","title":"VirusTotal yara-x unvalidated deserialization in Rules::deserialize","severity":"medium","exploited":false,"published_at":"2026-09-24T19:09:28+00:00","url":"https://junglewise.ai/threats/virustotal-yara-x-unvalidated-deserialization-in-rules-deserialize-d5769253"},{"cvss":4,"slug":"yara-x-unvalidated-deserialization-in-safe-rules-deserialize-allows-32b3c167","title":"yara-x unvalidated deserialization in Rules::deserialize allows memory corruption","severity":"medium","exploited":false,"published_at":"2026-09-24T19:09:28+00:00","url":"https://junglewise.ai/threats/yara-x-unvalidated-deserialization-in-safe-rules-deserialize-allows-32b3c167"},{"slug":"rustsec-2026-0308-use-after-free-in-interned-values-and-cached-function-b17317e6","title":"Salsa use-after-free in interned values and cached function results","severity":"info","exploited":false,"published_at":"2026-09-24T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0308-use-after-free-in-interned-values-and-cached-function-b17317e6"},{"cve":"CVE-2026-96889","cvss":7.8,"epss":0.0013,"slug":"cve-2026-96889-a-flaw-was-found-in-librsvg-when-processing-an-svg-document","title":"librsvg use-after-free in XML entity parsing","severity":"high","exploited":false,"published_at":"2026-09-23T20:17:27.587+00:00","url":"https://junglewise.ai/threats/cve-2026-96889-a-flaw-was-found-in-librsvg-when-processing-an-svg-document"},{"cvss":3.1,"slug":"rustsec-2026-0307-uncbv-archive-extraction-is-vulnerable-to-path-85640b52","title":"RUSTSEC-2026-0307 - `uncbv`: archive extraction is vulnerable to path traversal (zip-slip)","severity":"low","exploited":false,"published_at":"2026-09-23T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0307-uncbv-archive-extraction-is-vulnerable-to-path-85640b52"},{"slug":"rustsec-2026-0303-stack-graphs-is-archived-and-unmaintained-22300fa4","title":"stack-graphs library unmaintained and archived","severity":"info","exploited":false,"published_at":"2026-09-22T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0303-stack-graphs-is-archived-and-unmaintained-22300fa4"},{"slug":"rustsec-2026-0299-owned-alloc-is-unmaintained-18babe71","title":"owned-alloc library is unmaintained","severity":"info","exploited":false,"published_at":"2026-09-22T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0299-owned-alloc-is-unmaintained-18babe71"},{"slug":"rustsec-2026-0302-stack-graphs-c-api-exports-are-safe-extern-c-3d7bbffa","title":"stack-graphs C API memory safety violation in extern functions","severity":"info","exploited":false,"published_at":"2026-09-22T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0302-stack-graphs-c-api-exports-are-safe-extern-c-3d7bbffa"},{"slug":"rustsec-2026-0301-double-free-in-stackvec-retain-when-a-predicate-or-c383c050","title":"stack_collections double free in StackVec::retain on panic","severity":"info","exploited":false,"published_at":"2026-09-22T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0301-double-free-in-stackvec-retain-when-a-predicate-or-c383c050"},{"slug":"rustsec-2026-0293-double-free-use-after-free-in-consumer-skip-and-ca717866","title":"ringbuf double free and use-after-free in Consumer skip and clear","severity":"info","exploited":false,"published_at":"2026-09-21T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0293-double-free-use-after-free-in-consumer-skip-and-ca717866"},{"cvss":4,"slug":"rustsec-2026-0304-finished-streaming-calls-keep-reading-a-stalled-149b22ef","title":"connectrpc resource exhaustion in streaming request handling","severity":"medium","exploited":false,"published_at":"2026-09-21T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0304-finished-streaming-calls-keep-reading-a-stalled-149b22ef"},{"slug":"rustsec-2026-0296-unzip-is-unmaintained-8d3c4670","title":"unzip library unmaintained with known path-traversal vulnerability","severity":"info","exploited":false,"published_at":"2026-09-21T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0296-unzip-is-unmaintained-8d3c4670"},{"cve":"CVE-2026-92612","epss":0.0015,"slug":"cve-2026-92612-in-eclipse-iceoryx2-versions-greater-than-v0-8-0-the-staticstring","title":"Eclipse iceoryx2 unsafe string handling in StaticString","severity":"info","exploited":false,"published_at":"2026-09-21T11:17:12.59+00:00","url":"https://junglewise.ai/threats/cve-2026-92612-in-eclipse-iceoryx2-versions-greater-than-v0-8-0-the-staticstring"},{"slug":"rustsec-2026-0306-hex-decode-unchecked-avx2-path-reads-past-src-200a11cb","title":"faster-hex hex_decode_unchecked out-of-bounds read in AVX2 path","severity":"info","exploited":false,"published_at":"2026-09-20T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0306-hex-decode-unchecked-avx2-path-reads-past-src-200a11cb"},{"cve":"CVE-2026-61670","cvss":6.5,"epss":0.0012,"slug":"cve-2026-61670-microsandbox-information-disclosure-in-process-arguments","title":"microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkCon","severity":"medium","exploited":false,"published_at":"2026-09-18T21:17:01.973+00:00","url":"https://junglewise.ai/threats/cve-2026-61670-microsandbox-information-disclosure-in-process-arguments"},{"cve":"CVE-2026-93602","cvss":4.4,"epss":0.0021,"slug":"cve-2026-93602-rustls-webpki-crl-distribution-point-matching-bypass","title":"rustls-webpki CRL distribution point matching bypass","severity":"medium","exploited":false,"published_at":"2026-09-18T14:19:11.85+00:00","url":"https://junglewise.ai/threats/cve-2026-93602-rustls-webpki-crl-distribution-point-matching-bypass"},{"cve":"CVE-2026-93601","cvss":3.1,"epss":0.0018,"slug":"cve-2026-93601-rustls-webpki-name-constraint-bypass-for-wildcard-certificates","title":"rustls-webpki name constraint bypass for wildcard certificates","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:11.707+00:00","url":"https://junglewise.ai/threats/cve-2026-93601-rustls-webpki-name-constraint-bypass-for-wildcard-certificates"},{"cve":"CVE-2026-93600","cvss":3.1,"epss":0.0018,"slug":"cve-2026-93600-rustls-webpki-x-509-name-constraint-bypass-for-uri-names","title":"rustls-webpki X.509 name constraint bypass for URI names","severity":"low","exploited":false,"published_at":"2026-09-18T14:19:11.563+00:00","url":"https://junglewise.ai/threats/cve-2026-93600-rustls-webpki-x-509-name-constraint-bypass-for-uri-names"},{"cve":"CVE-2026-93599","cvss":7.5,"epss":0.0049,"slug":"cve-2026-93599-rustls-webpki-integer-underflow-in-bit-string-parsing","title":"rustls-webpki integer underflow in BIT STRING parsing","severity":"high","exploited":false,"published_at":"2026-09-18T14:19:11.41+00:00","url":"https://junglewise.ai/threats/cve-2026-93599-rustls-webpki-integer-underflow-in-bit-string-parsing"},{"cve":"CVE-2026-68537","cvss":7.5,"epss":0.0061,"slug":"cve-2026-68537-fulgur-non-painting-replaced-elements-denial-of-service","title":"`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19","severity":"high","exploited":false,"published_at":"2026-09-17T21:17:19.87+00:00","url":"https://junglewise.ai/threats/cve-2026-68537-fulgur-non-painting-replaced-elements-denial-of-service"},{"cve":"CVE-2026-68523","cvss":7.5,"epss":0.0061,"slug":"cve-2026-68523-fulgur-unbounded-page-slicing-denial-of-service","title":"`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19","severity":"high","exploited":false,"published_at":"2026-09-17T21:17:19.127+00:00","url":"https://junglewise.ai/threats/cve-2026-68523-fulgur-unbounded-page-slicing-denial-of-service"},{"slug":"rustsec-2026-0289-pqc-kyber-is-unmaintained-e19367b2","title":"pqc_kyber Rust library unmaintained with unpatched flaw","severity":"info","exploited":false,"published_at":"2026-09-17T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0289-pqc-kyber-is-unmaintained-e19367b2"},{"slug":"rustsec-2026-0287-cosmian-kyber-is-unmaintained-4add3c59","title":"cosmian_kyber unmaintained library","severity":"info","exploited":false,"published_at":"2026-09-17T12:00:00+00:00","url":"https://junglewise.ai/threats/rustsec-2026-0287-cosmian-kyber-is-unmaintained-4add3c59"},{"cve":"CVE-2026-64684","cvss":6.8,"epss":0.005,"slug":"cve-2026-64684-model-context-protocol-rust-sdk-custom-header-leak-on-cross","title":"RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.1.0, the rmcp crate's StreamableHttpClientTransport in crates/rmcp/s","severity":"medium","exploited":false,"published_at":"2026-09-16T22:17:04.577+00:00","url":"https://junglewise.ai/threats/cve-2026-64684-model-context-protocol-rust-sdk-custom-header-leak-on-cross"},{"cve":"CVE-2026-63128","cvss":7.5,"epss":0.0063,"slug":"cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory","title":"RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's stateful Streamable HTTP server in crates/rmcp","severity":"high","exploited":false,"published_at":"2026-09-16T15:17:39.96+00:00","url":"https://junglewise.ai/threats/cve-2026-63128-rmcp-streamable-http-server-unauthenticated-session-table-memory"}],"vendor":{"hub":true,"name":"crates.io","slug":"crates-io","homepage":"https://crates.io/","ecosystem":"crates.io","description":"The official package registry for the Rust programming language.","url":"https://junglewise.ai/threats/vendors/crates-io"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":51},{"week":"2026-07-06","critical":1,"exploited":0,"vulnerabilities":37},{"week":"2026-07-13","critical":1,"exploited":0,"vulnerabilities":53},{"week":"2026-07-20","critical":1,"exploited":0,"vulnerabilities":54},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":18},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":13},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":12},{"week":"2026-08-17","critical":4,"exploited":0,"vulnerabilities":35},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":22},{"week":"2026-08-31","critical":1,"exploited":0,"vulnerabilities":13},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":15},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":20},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":13}],"most_severe":[{"cve":"CVE-2023-4863","cvss":3.1,"epss":0.9998,"slug":"cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability","title":"RUSTSEC-2023-0060 - libwebp: OOB write in BuildHuffmanTable","severity":"critical","exploited":true,"published_at":"2023-09-12T12:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2026-46695","cvss":10,"epss":0.0048,"slug":"cve-2026-46695-boxlite-ai-boxlite-read-only-volume-bypass-via-cap-sys-admin","title":"boxlite-ai Boxlite read-only volume bypass via CAP_SYS_ADMIN","severity":"critical","exploited":false,"published_at":"2026-06-10T23:16:47.747+00:00","url":"https://junglewise.ai/threats/cve-2026-46695-boxlite-ai-boxlite-read-only-volume-bypass-via-cap-sys-admin"},{"cve":"CVE-2018-25024","cvss":9.8,"epss":0.0129,"slug":"cve-2018-25024-actix-web-memory-corruption-via-unsound-reference-coercion","title":"actix-web memory corruption via unsound reference coercion","severity":"critical","exploited":false,"published_at":"2022-01-06T22:20:41+00:00","url":"https://junglewise.ai/threats/cve-2018-25024-actix-web-memory-corruption-via-unsound-reference-coercion"},{"cve":"CVE-2026-77651","cvss":9.8,"epss":0.008,"slug":"cve-2026-77651-arrayref-crate-malicious-dependency-code-execution-at-build-time","title":"arrayref crate malicious dependency code execution at build time","severity":"critical","exploited":false,"published_at":"2026-08-21T01:17:02.14+00:00","url":"https://junglewise.ai/threats/cve-2026-77651-arrayref-crate-malicious-dependency-code-execution-at-build-time"},{"cve":"CVE-2026-77650","cvss":9.8,"epss":0.008,"slug":"cve-2026-77650-append-only-vec-crate-malicious-build-script-supply-chain-attack","title":"append-only-vec crate malicious build script supply chain attack","severity":"critical","exploited":false,"published_at":"2026-08-21T01:17:01.993+00:00","url":"https://junglewise.ai/threats/cve-2026-77650-append-only-vec-crate-malicious-build-script-supply-chain-attack"},{"cve":"CVE-2026-77649","cvss":9.8,"epss":0.008,"slug":"cve-2026-77649-internment-rust-crate-malicious-dependency-injection","title":"internment Rust crate malicious dependency injection","severity":"critical","exploited":false,"published_at":"2026-08-21T01:17:01.837+00:00","url":"https://junglewise.ai/threats/cve-2026-77649-internment-rust-crate-malicious-dependency-injection"},{"cve":"CVE-2026-41681","cvss":9.8,"epss":0.0062,"slug":"cve-2026-41681-rust-openssl-stack-buffer-overflow-in-mdctxref-digest-final","title":"rust-openssl stack buffer overflow in MdCtxRef::digest_final","severity":"critical","exploited":false,"published_at":"2026-04-24T18:16:29.717+00:00","url":"https://junglewise.ai/threats/cve-2026-41681-rust-openssl-stack-buffer-overflow-in-mdctxref-digest-final"},{"cve":"CVE-2018-25026","cvss":9.8,"epss":0.0036,"slug":"cve-2018-25026-actix-web-memory-corruption-via-unsound-send-trait-implementation","title":"actix-web memory corruption via unsound Send trait implementation","severity":"critical","exploited":false,"published_at":"2022-01-06T22:18:58+00:00","url":"https://junglewise.ai/threats/cve-2018-25026-actix-web-memory-corruption-via-unsound-send-trait-implementation"},{"cve":"CVE-2018-25025","cvss":9.8,"epss":0.0036,"slug":"cve-2018-25025-actix-actix-web-out-of-bounds-write-via-unsound-string-lifetimes","title":"Actix actix-web out-of-bounds write via unsound string lifetimes","severity":"critical","exploited":false,"published_at":"2022-01-06T22:18:46+00:00","url":"https://junglewise.ai/threats/cve-2018-25025-actix-actix-web-out-of-bounds-write-via-unsound-string-lifetimes"},{"cve":"CVE-2026-46703","cvss":9.6,"epss":0.0078,"slug":"cve-2026-46703-boxlite-ai-boxlite-path-traversal-via-oci-layer-symlink-escape","title":"boxlite-ai Boxlite path traversal via OCI layer symlink escape","severity":"critical","exploited":false,"published_at":"2026-06-10T23:16:47.893+00:00","url":"https://junglewise.ai/threats/cve-2026-46703-boxlite-ai-boxlite-path-traversal-via-oci-layer-symlink-escape"}],"generated_at":"2026-09-27T03:07:00.185062+00:00","technologies":[{"name":"surrealdb (crates.io)","slug":"surrealdb","vulnerabilities":118,"url":"https://junglewise.ai/threats/technologies/surrealdb"},{"name":"coreutils (crates.io)","slug":"crates-io-coreutils","vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/crates-io-coreutils"},{"name":"wasmtime (crates.io)","slug":"wasmtime","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/wasmtime"},{"name":"deno (crates.io)","slug":"deno","vulnerabilities":36,"url":"https://junglewise.ai/threats/technologies/deno"},{"name":"zebrad (crates.io)","slug":"zebrad","vulnerabilities":31,"url":"https://junglewise.ai/threats/technologies/zebrad"},{"name":"openssl-src (crates.io)","slug":"openssl-src","vulnerabilities":26,"url":"https://junglewise.ai/threats/technologies/openssl-src"},{"name":"openssl (crates.io)","slug":"crates-io-openssl","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/crates-io-openssl"},{"name":"rustfs (crates.io)","slug":"rustfs","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/rustfs"},{"name":"ckb (crates.io)","slug":"ckb","vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/ckb"},{"name":"diesel (crates.io)","slug":"diesel","vulnerabilities":17,"url":"https://junglewise.ai/threats/technologies/diesel"},{"name":"pyo3 (crates.io)","slug":"pyo3","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/pyo3"},{"name":"russh (crates.io)","slug":"crates-io-russh","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/crates-io-russh"},{"name":"deepseek-tui (crates.io)","slug":"deepseek-tui","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/deepseek-tui"},{"name":"astral-tokio-tar (crates.io)","slug":"astral-tokio-tar","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/astral-tokio-tar"},{"name":"tough (crates.io)","slug":"crates-io-tough","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/crates-io-tough"},{"name":"gix (crates.io)","slug":"gix","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/gix"},{"name":"libcrux-ml-dsa (crates.io)","slug":"libcrux-ml-dsa","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/libcrux-ml-dsa"},{"name":"codewhale-tui (crates.io)","slug":"codewhale-tui","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/codewhale-tui"},{"name":"hyper (crates.io)","slug":"hyper","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/hyper"},{"name":"nostr (crates.io)","slug":"nostr","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/nostr"},{"name":"pingora-core (crates.io)","slug":"pingora-core","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/pingora-core"},{"name":"rkyv (crates.io)","slug":"rkyv","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/rkyv"},{"name":"ammonia (crates.io)","slug":"ammonia","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/ammonia"},{"name":"gitoxide (crates.io)","slug":"crates-io-gitoxide","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/crates-io-gitoxide"},{"name":"routinator (crates.io)","slug":"crates-io-routinator","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/crates-io-routinator"},{"name":"surrealdb-core (crates.io)","slug":"crates-io-surrealdb-core","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/crates-io-surrealdb-core"},{"name":"vaultwarden (crates.io)","slug":"crates-io-vaultwarden","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/crates-io-vaultwarden"},{"name":"apollo-router (crates.io)","slug":"apollo-router","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/apollo-router"},{"name":"arrow (crates.io)","slug":"arrow","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/arrow"},{"name":"aws-lc-sys (crates.io)","slug":"crates-io-aws-lc-sys","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/crates-io-aws-lc-sys"},{"name":"cargo (crates.io)","slug":"crates-io-cargo","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/crates-io-cargo"},{"name":"hickory-proto (crates.io)","slug":"hickory-proto","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/hickory-proto"},{"name":"hubuum_client (crates.io)","slug":"hubuum-client","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/hubuum-client"},{"name":"internment (crates.io)","slug":"internment","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/internment"},{"name":"matrix-sdk-crypto (crates.io)","slug":"matrix-sdk-crypto","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/matrix-sdk-crypto"},{"name":"postgres-protocol (crates.io)","slug":"postgres-protocol","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/postgres-protocol"},{"name":"rustls-webpki (crates.io)","slug":"rustls-webpki","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/rustls-webpki"},{"name":"Simple-Wayland-HotKey-Daemon (crates.io)","slug":"simple-wayland-hotkey-daemon","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/simple-wayland-hotkey-daemon"},{"name":"bottlerocket/update-operator (crates.io)","slug":"bottlerocket-update-operator","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/bottlerocket-update-operator"},{"name":"comrak (crates.io)","slug":"comrak","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/comrak"},{"name":"tar (crates.io)","slug":"crates-io-tar","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/crates-io-tar"},{"name":"crossbeam (crates.io)","slug":"crossbeam","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/crossbeam"},{"name":"crossbeam-channel (crates.io)","slug":"crossbeam-channel","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/crossbeam-channel"},{"name":"git2 (crates.io)","slug":"git2","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/git2"},{"name":"lemmy_api (crates.io)","slug":"lemmy-api","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/lemmy-api"},{"name":"mise (crates.io)","slug":"mise","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/mise"},{"name":"nimiq-primitives (crates.io)","slug":"nimiq-primitives","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/nimiq-primitives"},{"name":"pgp (crates.io)","slug":"pgp","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/pgp"},{"name":"slice-deque (crates.io)","slug":"slice-deque","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/slice-deque"},{"name":"smallvec (crates.io)","slug":"smallvec","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/smallvec"},{"name":"sudo-rs (crates.io)","slug":"sudo-rs","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/sudo-rs"},{"name":"tokio (crates.io)","slug":"tokio","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/tokio"},{"name":"triton-vm (crates.io)","slug":"triton-vm","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/triton-vm"},{"name":"users (crates.io)","slug":"users","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/users"},{"name":"wasm3 (crates.io)","slug":"wasm3","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/wasm3"},{"name":"zebra-chain (crates.io)","slug":"zebra-chain","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/zebra-chain"},{"name":"zebra-network (crates.io)","slug":"zebra-network","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/zebra-network"},{"name":"zeptoclaw (crates.io)","slug":"zeptoclaw","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/zeptoclaw"},{"name":"actix-http (crates.io)","slug":"actix-http","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/actix-http"},{"name":"actix-web (crates.io)","slug":"actix-web","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/actix-web"},{"name":"anchor-lang (crates.io)","slug":"anchor-lang","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/anchor-lang"},{"name":"array-macro (crates.io)","slug":"array-macro","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/array-macro"},{"name":"cggmp21 (crates.io)","slug":"cggmp21","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/cggmp21"},{"name":"cranelift-codegen (crates.io)","slug":"cranelift-codegen","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/cranelift-codegen"},{"name":"gix-transport (crates.io)","slug":"crates-io-gix-transport","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-gix-transport"},{"name":"gix-worktree-state (crates.io)","slug":"crates-io-gix-worktree-state","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-gix-worktree-state"},{"name":"h2 (crates.io)","slug":"crates-io-h2","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-h2"},{"name":"inventory (crates.io)","slug":"crates-io-inventory","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-inventory"},{"name":"ntpd (crates.io)","slug":"crates-io-ntpd","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-ntpd"},{"name":"quinn-proto (crates.io)","slug":"crates-io-quinn-proto","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-quinn-proto"},{"name":"s2n-quic (crates.io)","slug":"crates-io-s2n-quic","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-s2n-quic"},{"name":"sequoia-openpgp (crates.io)","slug":"crates-io-sequoia-openpgp","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-sequoia-openpgp"},{"name":"spin (crates.io)","slug":"crates-io-spin","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-spin"},{"name":"tauri (crates.io)","slug":"crates-io-tauri","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/crates-io-tauri"},{"name":"deno_runtime (crates.io)","slug":"deno-runtime","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/deno-runtime"},{"name":"fast-float (crates.io)","slug":"fast-float","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/fast-float"},{"name":"flatbuffers (crates.io)","slug":"flatbuffers","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/flatbuffers"},{"name":"gitoxide-core (crates.io)","slug":"gitoxide-core","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/gitoxide-core"},{"name":"hpke-rs (crates.io)","slug":"hpke-rs","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/hpke-rs"},{"name":"libcrux-sha3 (crates.io)","slug":"libcrux-sha3","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/libcrux-sha3"},{"name":"libpulse-binding (crates.io)","slug":"libpulse-binding","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/libpulse-binding"},{"name":"lru (crates.io)","slug":"lru","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/lru"},{"name":"mistralrs-server-core (crates.io)","slug":"mistralrs-server-core","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/mistralrs-server-core"},{"name":"nimiq-blockchain (crates.io)","slug":"nimiq-blockchain","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/nimiq-blockchain"},{"name":"nostr-relay-pool (crates.io)","slug":"nostr-relay-pool","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/nostr-relay-pool"},{"name":"oneringbuf (crates.io)","slug":"oneringbuf","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/oneringbuf"},{"name":"oqs (crates.io)","slug":"oqs","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/oqs"},{"name":"pleaser (crates.io)","slug":"pleaser","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/pleaser"},{"name":"pqc_kyber (crates.io)","slug":"pqc-kyber","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/pqc-kyber"},{"name":"rmcp (crates.io)","slug":"rmcp","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/rmcp"},{"name":"salvo (crates.io)","slug":"salvo","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/salvo"},{"name":"skillctl (crates.io)","slug":"skillctl","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/skillctl"},{"name":"solana_rbpf (crates.io)","slug":"solana-rbpf","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/solana-rbpf"},{"name":"xcb (crates.io)","slug":"xcb","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/xcb"},{"name":"zebra-rpc (crates.io)","slug":"zebra-rpc","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/zebra-rpc"},{"name":"zebra-script (crates.io)","slug":"zebra-script","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/zebra-script"},{"name":"zebra-state (crates.io)","slug":"zebra-state","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/zebra-state"},{"name":"anoncreds-clsignatures (crates.io)","slug":"anoncreds-clsignatures","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/anoncreds-clsignatures"},{"name":"apache-avro (crates.io)","slug":"apache-avro","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/apache-avro"},{"name":"append-only-vec (crates.io)","slug":"append-only-vec","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/append-only-vec"},{"name":"arenavec (crates.io)","slug":"arenavec","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/arenavec"},{"name":"array-queue (crates.io)","slug":"array-queue","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/array-queue"},{"name":"arrayref (crates.io)","slug":"arrayref","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/arrayref"},{"name":"arrow2 (crates.io)","slug":"arrow2","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/arrow2"},{"name":"ascii (crates.io)","slug":"ascii","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ascii"},{"name":"async-graphql (crates.io)","slug":"async-graphql","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/async-graphql"},{"name":"atty (crates.io)","slug":"atty","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/atty"},{"name":"bumpalo (crates.io)","slug":"bumpalo","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/bumpalo"},{"name":"capnp (crates.io)","slug":"capnp","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/capnp"},{"name":"gix-worktree (crates.io)","slug":"crates-io-gix-worktree","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-gix-worktree"},{"name":"hpack (crates.io)","slug":"crates-io-hpack","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-hpack"},{"name":"lettre (crates.io)","slug":"crates-io-lettre","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-lettre"},{"name":"mongodb (crates.io)","slug":"crates-io-mongodb","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-mongodb"},{"name":"ncurses (crates.io)","slug":"crates-io-ncurses","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-ncurses"},{"name":"protobuf (crates.io)","slug":"crates-io-protobuf","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-protobuf"},{"name":"s2n-tls (crates.io)","slug":"crates-io-s2n-tls","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-s2n-tls"},{"name":"static-web-server (crates.io)","slug":"crates-io-static-web-server","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crates-io-static-web-server"},{"name":"crayon (crates.io)","slug":"crayon","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/crayon"},{"name":"dbn (crates.io)","slug":"dbn","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/dbn"},{"name":"enum-map (crates.io)","slug":"enum-map","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/enum-map"},{"name":"evm (crates.io)","slug":"evm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/evm"},{"name":"exploration (crates.io)","slug":"exploration","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/exploration"},{"name":"generator (crates.io)","slug":"generator","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/generator"},{"name":"gix-index (crates.io)","slug":"gix-index","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/gix-index"},{"name":"gix-path (crates.io)","slug":"gix-path","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/gix-path"},{"name":"grin (crates.io)","slug":"grin","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/grin"},{"name":"id-map (crates.io)","slug":"id-map","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/id-map"},{"name":"im (crates.io)","slug":"im","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/im"},{"name":"imageproc (crates.io)","slug":"imageproc","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/imageproc"},{"name":"intaglio (crates.io)","slug":"intaglio","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/intaglio"},{"name":"libcrux-aesgcm (crates.io)","slug":"libcrux-aesgcm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libcrux-aesgcm"},{"name":"libcrux-chacha20poly1305 (crates.io)","slug":"libcrux-chacha20poly1305","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libcrux-chacha20poly1305"},{"name":"libcrux-ed25519 (crates.io)","slug":"libcrux-ed25519","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libcrux-ed25519"},{"name":"libcrux-intrinsics (crates.io)","slug":"libcrux-intrinsics","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libcrux-intrinsics"},{"name":"libgit2-sys (crates.io)","slug":"libgit2-sys","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libgit2-sys"},{"name":"libp2p-core (crates.io)","slug":"libp2p-core","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libp2p-core"},{"name":"libsecp256k1 (crates.io)","slug":"libsecp256k1","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/libsecp256k1"},{"name":"matrix-sdk (crates.io)","slug":"matrix-sdk","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/matrix-sdk"},{"name":"memoffset (crates.io)","slug":"memoffset","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/memoffset"},{"name":"metacall (crates.io)","slug":"metacall","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/metacall"},{"name":"ml-dsa (crates.io)","slug":"ml-dsa","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ml-dsa"},{"name":"namada-apps (crates.io)","slug":"namada-apps","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/namada-apps"},{"name":"nono-cli (crates.io)","slug":"nono-cli","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/nono-cli"},{"name":"ouch (crates.io)","slug":"ouch","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ouch"},{"name":"pallet-ethereum (crates.io)","slug":"pallet-ethereum","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/pallet-ethereum"},{"name":"proc-macro1 (crates.io)","slug":"proc-macro1","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/proc-macro1"},{"name":"quiche (crates.io)","slug":"quiche","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/quiche"},{"name":"ring (crates.io)","slug":"ring","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ring"},{"name":"risc0-zkvm (crates.io)","slug":"risc0-zkvm","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/risc0-zkvm"},{"name":"ruint (crates.io)","slug":"ruint","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ruint"},{"name":"rust-crypto (crates.io)","slug":"rust-crypto","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rust-crypto"},{"name":"rustc-serialize (crates.io)","slug":"rustc-serialize","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rustc-serialize"},{"name":"rustls (crates.io)","slug":"rustls","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/rustls"},{"name":"scratchpad (crates.io)","slug":"scratchpad","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/scratchpad"},{"name":"sized-chunks (crates.io)","slug":"sized-chunks","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sized-chunks"},{"name":"sm2 (crates.io)","slug":"sm2","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sm2"},{"name":"sodiumoxide (crates.io)","slug":"sodiumoxide","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sodiumoxide"},{"name":"steamworks (crates.io)","slug":"steamworks","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/steamworks"},{"name":"tokio-postgres (crates.io)","slug":"tokio-postgres","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/tokio-postgres"},{"name":"toodee (crates.io)","slug":"toodee","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/toodee"},{"name":"traitobject (crates.io)","slug":"traitobject","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/traitobject"},{"name":"unicycle (crates.io)","slug":"unicycle","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/unicycle"},{"name":"ursa (crates.io)","slug":"ursa","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ursa"},{"name":"uucore (crates.io)","slug":"uucore","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/uucore"},{"name":"vibeio-http (crates.io)","slug":"vibeio-http","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/vibeio-http"},{"name":"wasmtime-wasi (crates.io)","slug":"wasmtime-wasi","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/wasmtime-wasi"},{"name":"yamux (crates.io)","slug":"yamux","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/yamux"},{"name":"youki (crates.io)","slug":"youki","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/youki"},{"name":"zebra-consensus (crates.io)","slug":"zebra-consensus","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/zebra-consensus"}]}