# crates.io package vulnerabilities Source: https://junglewise.ai/threats/vendors/crates-io Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 02:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/crates-io.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 2,374 vulnerabilities in crates.io packages: 19 in the last 7 days and 319 in the last 90 days, 35 of them critical and 1 exploited in the wild. The most recent, CVE-2026-42067, was published on 10 November 2026. 138 vulnerabilities in the last four weeks, up 64% on the four before (84). 3 critical against 0. 177 packages have a page of their own. ## Counts - Last 7 days: 19 - Last 30 days: 143 - Last 90 days: 319 - All time: 2374 (35 critical, 1 exploited in the wild) ## About crates.io Package registry for Rust programming language libraries and applications. ## Latest crates.io package vulnerabilities - [CVE-2026-42067: Intel TDX Workload Attestation certificate validation bypass](https://junglewise.ai/threats/cve-2026-42067-improper-certificate-validation-for-some-intel-r-tdx-workload) (medium, CVSS 4, published 10 Nov 2026) - [CVE-2026-40693: Intel TDX Workload Attestation Software input validation denial of service](https://junglewise.ai/threats/cve-2026-40693-improper-input-validation-for-some-intel-r-tdx-workload) (medium, CVSS 4, published 10 Nov 2026) - [lwd-uri-util malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0483-lwd-uri-util-was-removed-from-crates-io-for-malicious-7e009ea3) (info, published 10 Nov 2026) - [gabby-types-sec malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0470-gabby-types-sec-was-removed-from-crates-io-for-6e7f1340) (info, published 9 Nov 2026) - [env-test-guard malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0469-env-test-guard-was-removed-from-crates-io-for-a37f7564) (info, published 9 Nov 2026) - [electrumd malicious build-time telemetry exfiltration](https://junglewise.ai/threats/rustsec-2026-0465-electrumd-was-removed-from-crates-io-for-malicious-d05ac728) (info, published 9 Nov 2026) - [webhook_commands malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0464-webhook-commands-was-removed-from-crates-io-for-9dbabcdb) (info, published 9 Nov 2026) - [Rust crate shinchina malicious code in build environment telemetry](https://junglewise.ai/threats/rustsec-2026-0468-shinchina-was-removed-from-crates-io-for-malicious-e1b69f9a) (info, published 6 Nov 2026) - [vodozemac Olm key ratchet memory exposure](https://junglewise.ai/threats/rustsec-2026-0451-degraded-secret-zeroization-capabilities-e41f4f5c) (info, published 6 Nov 2026) - [actix-http unbounded decompression denial of service](https://junglewise.ai/threats/rustsec-2026-0448-unbounded-decompression-can-exhaust-memory-and-cpu-f56d9644) (info, published 6 Nov 2026) - [sec-gemini malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0471-sec-gemini-was-removed-from-crates-io-for-malicious-1c99bb89) (info, published 6 Nov 2026) - [actix-http request smuggling through malformed chunked trailers](https://junglewise.ai/threats/rustsec-2026-0446-request-smuggling-through-malformed-chunked-request-5ce6bfaf) (info, published 6 Nov 2026) - [actix-http memory exhaustion via large-window Brotli](https://junglewise.ai/threats/rustsec-2026-0455-large-window-brotli-bodies-bypass-decompression-8b64dc69) (info, published 6 Nov 2026) - [top_level_crate malicious code with telemetry exfiltration](https://junglewise.ai/threats/rustsec-2026-0467-top-level-crate-was-removed-from-crates-io-for-2a17222d) (info, published 6 Nov 2026) - [actix-web denial of service via compressed request bodies](https://junglewise.ai/threats/rustsec-2026-0447-compressed-request-bodies-can-exhaust-memory-before-b7c4ea38) (info, published 6 Nov 2026) - [vodozemac degraded secret zeroization in cryptographic libraries](https://junglewise.ai/threats/rustsec-2026-0445-degraded-secret-zeroization-capabilities-1022d5f6) (info, published 6 Nov 2026) - [actix-files hidden file disclosure through Windows short names](https://junglewise.ai/threats/rustsec-2026-0443-hidden-file-disclosure-through-windows-short-names-c06f4e77) (info, published 6 Nov 2026) - [shinchina-test malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0472-shinchina-test-was-removed-from-crates-io-for-722c15ea) (info, published 6 Nov 2026) - [build_dep malicious code in Rust crate](https://junglewise.ai/threats/rustsec-2026-0466-build-dep-was-removed-from-crates-io-for-malicious-8bcb3944) (info, published 6 Nov 2026) - [CVE-2026-111062: russh SSH server signature algorithm mismatch in publickey auth](https://junglewise.ai/threats/cve-2026-111062-a-russh-ssh-server-accepts-a-publickey-authentication-whose) (medium, CVSS 4, published 5 Nov 2026) - [ocipkg library unmaintained](https://junglewise.ai/threats/rustsec-2026-0449-ocipkg-is-unmaintained-7f2ed742) (info, published 5 Nov 2026) - [RUSTSEC-2026-0462 - Unbounded response body buffering in Streamable HTTP clients](https://junglewise.ai/threats/rustsec-2026-0462-unbounded-response-body-buffering-in-streamable-http-3cfaf6d0) (low, CVSS 3.1, published 5 Nov 2026) - [RUSTSEC-2026-0460 - Panic on chroma QP offsets enabled with an empty offset list](https://junglewise.ai/threats/rustsec-2026-0460-panic-on-chroma-qp-offsets-enabled-with-an-empty-1f26792d) (low, CVSS 3.1, published 4 Nov 2026) - [RUSTSEC-2026-0456 - Panic on an HEVC tile layout that does not match the active SPS](https://junglewise.ai/threats/rustsec-2026-0456-panic-on-an-hevc-tile-layout-that-does-not-match-the-3edc7ad5) (low, CVSS 3.1, published 4 Nov 2026) - [RUSTSEC-2026-0458 - Memory exhaustion when parsing a crafted `iloc` box](https://junglewise.ai/threats/rustsec-2026-0458-memory-exhaustion-when-parsing-a-crafted-iloc-box-ff60a271) (low, CVSS 3.1, published 4 Nov 2026) ## Most severe crates.io package vulnerabilities - [CVE-2023-4863: RUSTSEC-2023-0060 - libwebp: OOB write in BuildHuffmanTable](https://junglewise.ai/threats/cve-2023-4863-google-chromium-webp-heap-based-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 12 Sep 2023) - [CVE-2026-46695: boxlite-ai Boxlite read-only volume bypass via CAP_SYS_ADMIN](https://junglewise.ai/threats/cve-2026-46695-boxlite-ai-boxlite-read-only-volume-bypass-via-cap-sys-admin) (critical, CVSS 10, published 10 Jun 2026) - [CVE-2025-62596: youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://junglewise.ai/threats/cve-2025-62596-youki-container-escape-and-denial-of-service-due-to-arbitrary) (critical, CVSS 10, published 6 Nov 2025) - [CVE-2025-62161: youki container escape via "masked path" abuse due to mount race conditions](https://junglewise.ai/threats/cve-2025-62161-youki-container-escape-via-masked-path-abuse-due-to-mount-race) (critical, CVSS 10, published 6 Nov 2025) - [CVE-2026-115893: Wasmtime Cranelift aarch64 br_table sandbox escape](https://junglewise.ai/threats/cve-2026-115893-wasmtime-is-a-runtime-for-webassembly-prior-to-36-0-19-48-0-7) (critical, CVSS 9.9, published 23 Oct 2026) - [CVE-2026-115889: Wasmtime Cranelift SSA value index overflow](https://junglewise.ai/threats/cve-2026-115889-wasmtime-is-a-runtime-for-webassembly-prior-to-36-0-19-and-43-0) (critical, CVSS 9.9, published 23 Oct 2026) - [CVE-2026-34987: Bytecode Alliance Wasmtime sandbox escape in Winch compiler backend](https://junglewise.ai/threats/cve-2026-34987-bytecode-alliance-wasmtime-sandbox-escape-in-winch-compiler) (critical, CVSS 9.9, published 9 Apr 2026) - [CVE-2025-68705: RustFS Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2025-68705-rustfs-path-traversal-vulnerability) (critical, CVSS 9.8, published 7 Jan 2026) - [CVE-2018-25024: actix-web memory corruption via unsound reference coercion](https://junglewise.ai/threats/cve-2018-25024-actix-web-memory-corruption-via-unsound-reference-coercion) (critical, CVSS 9.8, published 6 Jan 2022) - [CVE-2026-77651: arrayref crate malicious dependency code execution at build time](https://junglewise.ai/threats/cve-2026-77651-arrayref-crate-malicious-dependency-code-execution-at-build-time) (critical, CVSS 9.8, published 21 Aug 2026) ## Vulnerabilities per week 138 vulnerabilities in the last four weeks, up 64% on the four before (84). 3 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 41 | 5 | 0 | | 24 Aug 2026 | 21 | 0 | 0 | | 31 Aug 2026 | 11 | 0 | 0 | | 7 Sep 2026 | 14 | 0 | 0 | | 14 Sep 2026 | 27 | 0 | 0 | | 21 Sep 2026 | 22 | 0 | 0 | | 28 Sep 2026 | 23 | 0 | 0 | | 5 Oct 2026 | 12 | 0 | 0 | | 12 Oct 2026 | 46 | 0 | 0 | | 19 Oct 2026 | 29 | 2 | 0 | | 26 Oct 2026 | 40 | 1 | 0 | | 2 Nov 2026 | 23 | 0 | 0 | | 9 Nov 2026 | 7 | 0 | 0 | ## crates.io packages - [surrealdb (crates.io)](https://junglewise.ai/threats/technologies/surrealdb): 83 vulnerabilities - [wasmtime (crates.io)](https://junglewise.ai/threats/technologies/wasmtime): 67 vulnerabilities - [deno (crates.io)](https://junglewise.ai/threats/technologies/deno): 39 vulnerabilities - [zebrad (crates.io)](https://junglewise.ai/threats/technologies/zebrad): 27 vulnerabilities - [russh (crates.io)](https://junglewise.ai/threats/technologies/crates-io-russh): 26 vulnerabilities - [openssl-src (crates.io)](https://junglewise.ai/threats/technologies/openssl-src): 26 vulnerabilities - [openssl (crates.io)](https://junglewise.ai/threats/technologies/crates-io-openssl): 25 vulnerabilities - [rustfs (crates.io)](https://junglewise.ai/threats/technologies/rustfs): 25 vulnerabilities - [coreutils (crates.io)](https://junglewise.ai/threats/technologies/crates-io-coreutils): 21 vulnerabilities - [ckb (crates.io)](https://junglewise.ai/threats/technologies/ckb): 19 vulnerabilities - [apollo-router (crates.io)](https://junglewise.ai/threats/technologies/apollo-router): 13 vulnerabilities - [deepseek-tui (crates.io)](https://junglewise.ai/threats/technologies/deepseek-tui): 13 vulnerabilities - [diesel (crates.io)](https://junglewise.ai/threats/technologies/diesel): 13 vulnerabilities - [pyo3 (crates.io)](https://junglewise.ai/threats/technologies/pyo3): 13 vulnerabilities - [ammonia (crates.io)](https://junglewise.ai/threats/technologies/ammonia): 12 vulnerabilities - [rustls (crates.io)](https://junglewise.ai/threats/technologies/rustls): 12 vulnerabilities - [zstd-safe (crates.io)](https://junglewise.ai/threats/technologies/zstd-safe): 12 vulnerabilities - [wasmtime-wasi (crates.io)](https://junglewise.ai/threats/technologies/wasmtime-wasi): 11 vulnerabilities - [astral-tokio-tar (crates.io)](https://junglewise.ai/threats/technologies/astral-tokio-tar): 10 vulnerabilities - [quinn-proto (crates.io)](https://junglewise.ai/threats/technologies/crates-io-quinn-proto): 10 vulnerabilities - [surrealdb-core (crates.io)](https://junglewise.ai/threats/technologies/crates-io-surrealdb-core): 10 vulnerabilities - [tough (crates.io)](https://junglewise.ai/threats/technologies/crates-io-tough): 10 vulnerabilities - [gix (crates.io)](https://junglewise.ai/threats/technologies/gix): 10 vulnerabilities - [pingora-core (crates.io)](https://junglewise.ai/threats/technologies/pingora-core): 10 vulnerabilities - [tokio (crates.io)](https://junglewise.ai/threats/technologies/tokio): 10 vulnerabilities - [codewhale-tui (crates.io)](https://junglewise.ai/threats/technologies/codewhale-tui): 9 vulnerabilities - [zip (crates.io)](https://junglewise.ai/threats/technologies/zip): 9 vulnerabilities - [cargo (crates.io)](https://junglewise.ai/threats/technologies/crates-io-cargo): 8 vulnerabilities - [hyper (crates.io)](https://junglewise.ai/threats/technologies/hyper): 8 vulnerabilities - [libcrux-ml-dsa (crates.io)](https://junglewise.ai/threats/technologies/libcrux-ml-dsa): 8 vulnerabilities - [nostr (crates.io)](https://junglewise.ai/threats/technologies/nostr): 8 vulnerabilities - [rmcp (crates.io)](https://junglewise.ai/threats/technologies/rmcp): 8 vulnerabilities - [wasmtime-wasi-http (crates.io)](https://junglewise.ai/threats/technologies/wasmtime-wasi-http): 8 vulnerabilities - [cosmwasm-vm (crates.io)](https://junglewise.ai/threats/technologies/cosmwasm-vm): 7 vulnerabilities - [gitoxide (crates.io)](https://junglewise.ai/threats/technologies/crates-io-gitoxide): 7 vulnerabilities - [routinator (crates.io)](https://junglewise.ai/threats/technologies/crates-io-routinator): 7 vulnerabilities - [tauri (crates.io)](https://junglewise.ai/threats/technologies/crates-io-tauri): 7 vulnerabilities - [vaultwarden (crates.io)](https://junglewise.ai/threats/technologies/crates-io-vaultwarden): 7 vulnerabilities - [hickory-proto (crates.io)](https://junglewise.ai/threats/technologies/hickory-proto): 7 vulnerabilities - [matrix-sdk-crypto (crates.io)](https://junglewise.ai/threats/technologies/matrix-sdk-crypto): 7 vulnerabilities - [rkyv (crates.io)](https://junglewise.ai/threats/technologies/rkyv): 7 vulnerabilities - [rustls-webpki (crates.io)](https://junglewise.ai/threats/technologies/rustls-webpki): 7 vulnerabilities - [actix-http (crates.io)](https://junglewise.ai/threats/technologies/actix-http): 6 vulnerabilities - [arrow (crates.io)](https://junglewise.ai/threats/technologies/arrow): 6 vulnerabilities - [cranelift-codegen (crates.io)](https://junglewise.ai/threats/technologies/cranelift-codegen): 6 vulnerabilities - [aws-lc-sys (crates.io)](https://junglewise.ai/threats/technologies/crates-io-aws-lc-sys): 6 vulnerabilities - [h2 (crates.io)](https://junglewise.ai/threats/technologies/crates-io-h2): 6 vulnerabilities - [deno_runtime (crates.io)](https://junglewise.ai/threats/technologies/deno-runtime): 6 vulnerabilities - [git2 (crates.io)](https://junglewise.ai/threats/technologies/git2): 6 vulnerabilities - [imageproc (crates.io)](https://junglewise.ai/threats/technologies/imageproc): 6 vulnerabilities - [internment (crates.io)](https://junglewise.ai/threats/technologies/internment): 6 vulnerabilities - [mise (crates.io)](https://junglewise.ai/threats/technologies/mise): 6 vulnerabilities - [Simple-Wayland-HotKey-Daemon (crates.io)](https://junglewise.ai/threats/technologies/simple-wayland-hotkey-daemon): 6 vulnerabilities - [bottlerocket/update-operator (crates.io)](https://junglewise.ai/threats/technologies/bottlerocket-update-operator): 5 vulnerabilities - [comrak (crates.io)](https://junglewise.ai/threats/technologies/comrak): 5 vulnerabilities - [sequoia-openpgp (crates.io)](https://junglewise.ai/threats/technologies/crates-io-sequoia-openpgp): 5 vulnerabilities - [crossbeam (crates.io)](https://junglewise.ai/threats/technologies/crossbeam): 5 vulnerabilities - [crossbeam-channel (crates.io)](https://junglewise.ai/threats/technologies/crossbeam-channel): 5 vulnerabilities - [nimiq-primitives (crates.io)](https://junglewise.ai/threats/technologies/nimiq-primitives): 5 vulnerabilities - [pgp (crates.io)](https://junglewise.ai/threats/technologies/pgp): 5 vulnerabilities - [quiche (crates.io)](https://junglewise.ai/threats/technologies/quiche): 5 vulnerabilities - [slice-deque (crates.io)](https://junglewise.ai/threats/technologies/slice-deque): 5 vulnerabilities - [smallvec (crates.io)](https://junglewise.ai/threats/technologies/smallvec): 5 vulnerabilities - [sudo-rs (crates.io)](https://junglewise.ai/threats/technologies/sudo-rs): 5 vulnerabilities - [users (crates.io)](https://junglewise.ai/threats/technologies/users): 5 vulnerabilities - [wasm3 (crates.io)](https://junglewise.ai/threats/technologies/wasm3): 5 vulnerabilities - [zeptoclaw (crates.io)](https://junglewise.ai/threats/technologies/zeptoclaw): 5 vulnerabilities - [actix-web (crates.io)](https://junglewise.ai/threats/technologies/actix-web): 4 vulnerabilities - [array-macro (crates.io)](https://junglewise.ai/threats/technologies/array-macro): 4 vulnerabilities - [arrow2 (crates.io)](https://junglewise.ai/threats/technologies/arrow2): 4 vulnerabilities - [cggmp21 (crates.io)](https://junglewise.ai/threats/technologies/cggmp21): 4 vulnerabilities - [gix-transport (crates.io)](https://junglewise.ai/threats/technologies/crates-io-gix-transport): 4 vulnerabilities - [gix-worktree-state (crates.io)](https://junglewise.ai/threats/technologies/crates-io-gix-worktree-state): 4 vulnerabilities - [inventory (crates.io)](https://junglewise.ai/threats/technologies/crates-io-inventory): 4 vulnerabilities - [ntpd (crates.io)](https://junglewise.ai/threats/technologies/crates-io-ntpd): 4 vulnerabilities - [s2n-quic (crates.io)](https://junglewise.ai/threats/technologies/crates-io-s2n-quic): 4 vulnerabilities - [spin (crates.io)](https://junglewise.ai/threats/technologies/crates-io-spin): 4 vulnerabilities - [tar (crates.io)](https://junglewise.ai/threats/technologies/crates-io-tar): 4 vulnerabilities - [evm (crates.io)](https://junglewise.ai/threats/technologies/evm): 4 vulnerabilities - [fast-float (crates.io)](https://junglewise.ai/threats/technologies/fast-float): 4 vulnerabilities - [flatbuffers (crates.io)](https://junglewise.ai/threats/technologies/flatbuffers): 4 vulnerabilities - [gitoxide-core (crates.io)](https://junglewise.ai/threats/technologies/gitoxide-core): 4 vulnerabilities - [hpke-rs (crates.io)](https://junglewise.ai/threats/technologies/hpke-rs): 4 vulnerabilities - [hyper-staticfile (crates.io)](https://junglewise.ai/threats/technologies/hyper-staticfile): 4 vulnerabilities - [libcrux-sha3 (crates.io)](https://junglewise.ai/threats/technologies/libcrux-sha3): 4 vulnerabilities - [libpulse-binding (crates.io)](https://junglewise.ai/threats/technologies/libpulse-binding): 4 vulnerabilities - [lru (crates.io)](https://junglewise.ai/threats/technologies/lru): 4 vulnerabilities - [nimiq-blockchain (crates.io)](https://junglewise.ai/threats/technologies/nimiq-blockchain): 4 vulnerabilities - [nostr-relay-pool (crates.io)](https://junglewise.ai/threats/technologies/nostr-relay-pool): 4 vulnerabilities - [oqs (crates.io)](https://junglewise.ai/threats/technologies/oqs): 4 vulnerabilities - [pleaser (crates.io)](https://junglewise.ai/threats/technologies/pleaser): 4 vulnerabilities - [postgres-protocol (crates.io)](https://junglewise.ai/threats/technologies/postgres-protocol): 4 vulnerabilities - [pqc_kyber (crates.io)](https://junglewise.ai/threats/technologies/pqc-kyber): 4 vulnerabilities - [risc0-zkvm (crates.io)](https://junglewise.ai/threats/technologies/risc0-zkvm): 4 vulnerabilities - [salvo (crates.io)](https://junglewise.ai/threats/technologies/salvo): 4 vulnerabilities - [solana_rbpf (crates.io)](https://junglewise.ai/threats/technologies/solana-rbpf): 4 vulnerabilities - [tower-http (crates.io)](https://junglewise.ai/threats/technologies/tower-http): 4 vulnerabilities - [triton-vm (crates.io)](https://junglewise.ai/threats/technologies/triton-vm): 4 vulnerabilities - [vodozemac (crates.io)](https://junglewise.ai/threats/technologies/vodozemac): 4 vulnerabilities - [xcb (crates.io)](https://junglewise.ai/threats/technologies/xcb): 4 vulnerabilities - [zebra-chain (crates.io)](https://junglewise.ai/threats/technologies/zebra-chain): 4 vulnerabilities - [zebra-network (crates.io)](https://junglewise.ai/threats/technologies/zebra-network): 4 vulnerabilities - [zebra-script (crates.io)](https://junglewise.ai/threats/technologies/zebra-script): 4 vulnerabilities - [zebra-state (crates.io)](https://junglewise.ai/threats/technologies/zebra-state): 4 vulnerabilities - [actix-files (crates.io)](https://junglewise.ai/threats/technologies/actix-files): 3 vulnerabilities - [anchor-lang (crates.io)](https://junglewise.ai/threats/technologies/anchor-lang): 3 vulnerabilities - [anoncreds-clsignatures (crates.io)](https://junglewise.ai/threats/technologies/anoncreds-clsignatures): 3 vulnerabilities - [apache-avro (crates.io)](https://junglewise.ai/threats/technologies/apache-avro): 3 vulnerabilities - [append-only-vec (crates.io)](https://junglewise.ai/threats/technologies/append-only-vec): 3 vulnerabilities - [arenavec (crates.io)](https://junglewise.ai/threats/technologies/arenavec): 3 vulnerabilities - [array-queue (crates.io)](https://junglewise.ai/threats/technologies/array-queue): 3 vulnerabilities - [arrayref (crates.io)](https://junglewise.ai/threats/technologies/arrayref): 3 vulnerabilities - [async-graphql (crates.io)](https://junglewise.ai/threats/technologies/async-graphql): 3 vulnerabilities - [atty (crates.io)](https://junglewise.ai/threats/technologies/atty): 3 vulnerabilities - [bumpalo (crates.io)](https://junglewise.ai/threats/technologies/bumpalo): 3 vulnerabilities - [capnp (crates.io)](https://junglewise.ai/threats/technologies/capnp): 3 vulnerabilities - [gix-worktree (crates.io)](https://junglewise.ai/threats/technologies/crates-io-gix-worktree): 3 vulnerabilities - [hickory-resolver (crates.io)](https://junglewise.ai/threats/technologies/crates-io-hickory-resolver): 3 vulnerabilities - [hpack (crates.io)](https://junglewise.ai/threats/technologies/crates-io-hpack): 3 vulnerabilities - [lettre (crates.io)](https://junglewise.ai/threats/technologies/crates-io-lettre): 3 vulnerabilities - [mongodb (crates.io)](https://junglewise.ai/threats/technologies/crates-io-mongodb): 3 vulnerabilities - [ncurses (crates.io)](https://junglewise.ai/threats/technologies/crates-io-ncurses): 3 vulnerabilities - [orion (crates.io)](https://junglewise.ai/threats/technologies/crates-io-orion): 3 vulnerabilities - [protobuf (crates.io)](https://junglewise.ai/threats/technologies/crates-io-protobuf): 3 vulnerabilities - [s2n-tls (crates.io)](https://junglewise.ai/threats/technologies/crates-io-s2n-tls): 3 vulnerabilities - [static-web-server (crates.io)](https://junglewise.ai/threats/technologies/crates-io-static-web-server): 3 vulnerabilities - [webp (crates.io)](https://junglewise.ai/threats/technologies/crates-io-webp): 3 vulnerabilities - [zstd (crates.io)](https://junglewise.ai/threats/technologies/crates-io-zstd): 3 vulnerabilities - [crayon (crates.io)](https://junglewise.ai/threats/technologies/crayon): 3 vulnerabilities - [enum-map (crates.io)](https://junglewise.ai/threats/technologies/enum-map): 3 vulnerabilities - [evm-core (crates.io)](https://junglewise.ai/threats/technologies/evm-core): 3 vulnerabilities - [generator (crates.io)](https://junglewise.ai/threats/technologies/generator): 3 vulnerabilities - [gix-index (crates.io)](https://junglewise.ai/threats/technologies/gix-index): 3 vulnerabilities - [gix-path (crates.io)](https://junglewise.ai/threats/technologies/gix-path): 3 vulnerabilities - [grin (crates.io)](https://junglewise.ai/threats/technologies/grin): 3 vulnerabilities - [hubuum_client (crates.io)](https://junglewise.ai/threats/technologies/hubuum-client): 3 vulnerabilities - [id-map (crates.io)](https://junglewise.ai/threats/technologies/id-map): 3 vulnerabilities - [im (crates.io)](https://junglewise.ai/threats/technologies/im): 3 vulnerabilities - [intaglio (crates.io)](https://junglewise.ai/threats/technologies/intaglio): 3 vulnerabilities - [juniper (crates.io)](https://junglewise.ai/threats/technologies/juniper): 3 vulnerabilities - [lemmy_api (crates.io)](https://junglewise.ai/threats/technologies/lemmy-api): 3 vulnerabilities - [libcrux-aesgcm (crates.io)](https://junglewise.ai/threats/technologies/libcrux-aesgcm): 3 vulnerabilities - [libcrux-ed25519 (crates.io)](https://junglewise.ai/threats/technologies/libcrux-ed25519): 3 vulnerabilities - [libgit2-sys (crates.io)](https://junglewise.ai/threats/technologies/libgit2-sys): 3 vulnerabilities - [libp2p-core (crates.io)](https://junglewise.ai/threats/technologies/libp2p-core): 3 vulnerabilities - [libsecp256k1 (crates.io)](https://junglewise.ai/threats/technologies/libsecp256k1): 3 vulnerabilities - [matrix-sdk (crates.io)](https://junglewise.ai/threats/technologies/matrix-sdk): 3 vulnerabilities - [memoffset (crates.io)](https://junglewise.ai/threats/technologies/memoffset): 3 vulnerabilities - [metacall (crates.io)](https://junglewise.ai/threats/technologies/metacall): 3 vulnerabilities - [ml-dsa (crates.io)](https://junglewise.ai/threats/technologies/ml-dsa): 3 vulnerabilities - [namada-apps (crates.io)](https://junglewise.ai/threats/technologies/namada-apps): 3 vulnerabilities - [oneringbuf (crates.io)](https://junglewise.ai/threats/technologies/oneringbuf): 3 vulnerabilities - [ouch (crates.io)](https://junglewise.ai/threats/technologies/ouch): 3 vulnerabilities - [pallet-ethereum (crates.io)](https://junglewise.ai/threats/technologies/pallet-ethereum): 3 vulnerabilities - [proc-macro1 (crates.io)](https://junglewise.ai/threats/technologies/proc-macro1): 3 vulnerabilities - [ring (crates.io)](https://junglewise.ai/threats/technologies/ring): 3 vulnerabilities - [ruint (crates.io)](https://junglewise.ai/threats/technologies/ruint): 3 vulnerabilities - [rust-crypto (crates.io)](https://junglewise.ai/threats/technologies/rust-crypto): 3 vulnerabilities - [rustc-serialize (crates.io)](https://junglewise.ai/threats/technologies/rustc-serialize): 3 vulnerabilities - [ruzstd (crates.io)](https://junglewise.ai/threats/technologies/ruzstd): 3 vulnerabilities - [scratchpad (crates.io)](https://junglewise.ai/threats/technologies/scratchpad): 3 vulnerabilities - [sized-chunks (crates.io)](https://junglewise.ai/threats/technologies/sized-chunks): 3 vulnerabilities - [skiplist (crates.io)](https://junglewise.ai/threats/technologies/skiplist): 3 vulnerabilities - [slack-morphism (crates.io)](https://junglewise.ai/threats/technologies/slack-morphism): 3 vulnerabilities - [sm2 (crates.io)](https://junglewise.ai/threats/technologies/sm2): 3 vulnerabilities - [sodiumoxide (crates.io)](https://junglewise.ai/threats/technologies/sodiumoxide): 3 vulnerabilities - [toodee (crates.io)](https://junglewise.ai/threats/technologies/toodee): 3 vulnerabilities - [traitobject (crates.io)](https://junglewise.ai/threats/technologies/traitobject): 3 vulnerabilities - [trust-dns-server (crates.io)](https://junglewise.ai/threats/technologies/trust-dns-server): 3 vulnerabilities - [unicycle (crates.io)](https://junglewise.ai/threats/technologies/unicycle): 3 vulnerabilities - [unsafe-libyaml (crates.io)](https://junglewise.ai/threats/technologies/unsafe-libyaml): 3 vulnerabilities - [ursa (crates.io)](https://junglewise.ai/threats/technologies/ursa): 3 vulnerabilities - [yamux (crates.io)](https://junglewise.ai/threats/technologies/yamux): 3 vulnerabilities - [youki (crates.io)](https://junglewise.ai/threats/technologies/youki): 3 vulnerabilities - [zebra-consensus (crates.io)](https://junglewise.ai/threats/technologies/zebra-consensus): 3 vulnerabilities - [zebra-rpc (crates.io)](https://junglewise.ai/threats/technologies/zebra-rpc): 3 vulnerabilities - [zerocopy (crates.io)](https://junglewise.ai/threats/technologies/zerocopy): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "crates.io package vulnerabilities", https://junglewise.ai/threats/vendors/crates-io, 13 November 2026.