Vulnerable packages
Packages
Reverse lookup: every package coordinate seen in a CVE's affected list. Click a row to see every CVE that mentions it — with affected version range, fixed-in version, severity, and KEV status.
Sort by:
| # | Ecosystem | Package | CVEs | Latest CVE | purl |
|---|---|---|---|---|---|
| 1 | cargo | coreutils | 44 | Apr 22, 2026 | pkg:cargo/coreutils |
| 2 | cargo | wasmtime | 39 | May 14, 2026 | pkg:cargo/wasmtime |
| 3 | cargo | deno | 28 | Mar 12, 2026 | pkg:cargo/deno |
| 4 | cargo | openssl-src | 26 | Feb 24, 2023 | pkg:cargo/openssl-src |
| 5 | cargo | rusqlite | 15 | Dec 26, 2021 | pkg:cargo/rusqlite |
| 6 | cargo | apollo-router | 12 | Nov 7, 2025 | pkg:cargo/apollo-router |
| 7 | cargo | rustfs | 12 | Apr 22, 2026 | pkg:cargo/rustfs |
| 8 | cargo | openssl | 9 | Apr 24, 2026 | pkg:cargo/openssl |
| 9 | cargo | tough | 9 | Apr 24, 2026 | pkg:cargo/tough |
| 10 | cargo | zebrad | 9 | May 8, 2026 | pkg:cargo/zebrad |
| 11 | cargo | tauri | 7 | May 6, 2026 | pkg:cargo/tauri |
| 12 | cargo | vaultwarden | 7 | Mar 4, 2026 | pkg:cargo/vaultwarden |
| 13 | cargo | cargo | 6 | Aug 24, 2023 | pkg:cargo/cargo |
| 14 | cargo | cranelift-codegen | 6 | Mar 8, 2023 | pkg:cargo/cranelift-codegen |
| 15 | cargo | deno_runtime | 6 | Jun 4, 2025 | pkg:cargo/deno_runtime |
| 16 | cargo | hyper | 6 | Jul 7, 2021 | pkg:cargo/hyper |
| 17 | cargo | simple-wayland-hotkey-daemon | 6 | Apr 14, 2022 | pkg:cargo/simple-wayland-hotkey-daemon |
| 18 | cargo | sized-chunks | 6 | Sep 19, 2020 | pkg:cargo/sized-chunks |
| 19 | cargo | gitoxide | 5 | Apr 4, 2025 | pkg:cargo/gitoxide |
| 20 | cargo | lock_api | 5 | Dec 31, 2020 | pkg:cargo/lock_api |
| 21 | cargo | matrix-sdk-crypto | 5 | Jun 10, 2025 | pkg:cargo/matrix-sdk-crypto |
| 22 | cargo | russh | 5 | May 8, 2026 | pkg:cargo/russh |
| 23 | cargo | smallvec | 5 | Dec 26, 2021 | pkg:cargo/smallvec |
| 24 | cargo | sudo-rs | 5 | Nov 12, 2025 | pkg:cargo/sudo-rs |
| 25 | cargo | xcb | 5 | Feb 9, 2021 | pkg:cargo/xcb |
| 26 | cargo | comrak | 4 | Mar 28, 2023 | pkg:cargo/comrak |
| 27 | cargo | deepseek-tui | 4 | May 14, 2026 | pkg:cargo/deepseek-tui |
| 28 | cargo | evm | 4 | Jan 2, 2024 | pkg:cargo/evm |
| 29 | cargo | gitoxide-core | 4 | Apr 4, 2025 | pkg:cargo/gitoxide-core |
| 30 | cargo | gix | 4 | Apr 4, 2025 | pkg:cargo/gix |
| 31 | cargo | gix-worktree-state | 4 | Apr 4, 2025 | pkg:cargo/gix-worktree-state |
| 32 | cargo | libpulse-binding | 4 | Dec 26, 2021 | pkg:cargo/libpulse-binding |
| 33 | cargo | messagepack-rs | 4 | Dec 26, 2021 | pkg:cargo/messagepack-rs |
| 34 | cargo | pleaser | 4 | Oct 20, 2023 | pkg:cargo/pleaser |
| 35 | cargo | quiche | 4 | Aug 7, 2025 | pkg:cargo/quiche |
| 36 | cargo | routinator | 4 | Sep 13, 2023 | pkg:cargo/routinator |
| 37 | cargo | salvo | 4 | Mar 23, 2026 | pkg:cargo/salvo |
| 38 | cargo | actix-web | 3 | Dec 26, 2021 | pkg:cargo/actix-web |
| 39 | cargo | anoncreds-clsignatures | 3 | Jan 16, 2024 | pkg:cargo/anoncreds-clsignatures |
| 40 | cargo | arr | 3 | Dec 31, 2020 | pkg:cargo/arr |
| 41 | cargo | astral-tokio-tar | 3 | Mar 20, 2026 | pkg:cargo/astral-tokio-tar |
| 42 | cargo | cgc | 3 | Aug 8, 2021 | pkg:cargo/cgc |
| 43 | cargo | ckb | 3 | Dec 26, 2021 | pkg:cargo/ckb |
| 44 | cargo | crossbeam-channel | 3 | May 13, 2025 | pkg:cargo/crossbeam-channel |
| 45 | cargo | fltk | 3 | Mar 12, 2021 | pkg:cargo/fltk |
| 46 | cargo | gix-index | 3 | Apr 4, 2025 | pkg:cargo/gix-index |
| 47 | cargo | gix-path | 3 | Sep 6, 2024 | pkg:cargo/gix-path |
| 48 | cargo | gix-worktree | 3 | Apr 4, 2025 | pkg:cargo/gix-worktree |
| 49 | cargo | grin | 3 | Jul 28, 2020 | pkg:cargo/grin |
| 50 | cargo | id-map | 3 | Apr 7, 2021 | pkg:cargo/id-map |
| 51 | cargo | mongodb | 3 | Oct 13, 2025 | pkg:cargo/mongodb |
| 52 | cargo | pallet-ethereum | 3 | Sep 24, 2022 | pkg:cargo/pallet-ethereum |
| 53 | cargo | pingora-core | 3 | Mar 4, 2026 | pkg:cargo/pingora-core |
| 54 | cargo | quinn-proto | 3 | Mar 10, 2026 | pkg:cargo/quinn-proto |
| 55 | cargo | raw-cpuid | 3 | Dec 26, 2021 | pkg:cargo/raw-cpuid |
| 56 | cargo | risc0-zkvm | 3 | Oct 2, 2025 | pkg:cargo/risc0-zkvm |
| 57 | cargo | sequoia-openpgp | 3 | Dec 14, 2025 | pkg:cargo/sequoia-openpgp |
| 58 | cargo | slice-deque | 3 | Apr 1, 2021 | pkg:cargo/slice-deque |
| 59 | cargo | sm2 | 3 | Jan 10, 2026 | pkg:cargo/sm2 |
| 60 | cargo | solana_rbpf | 3 | May 21, 2022 | pkg:cargo/solana_rbpf |
| 61 | cargo | static-web-server | 3 | Feb 21, 2026 | pkg:cargo/static-web-server |
| 62 | cargo | tar | 3 | Mar 20, 2026 | pkg:cargo/tar |
| 63 | cargo | tokio | 3 | Jan 4, 2023 | pkg:cargo/tokio |
| 64 | cargo | tremor-script | 3 | Dec 26, 2021 | pkg:cargo/tremor-script |
| 65 | cargo | ursa | 3 | Jan 16, 2024 | pkg:cargo/ursa |
| 66 | cargo | wasm3 | 3 | Nov 8, 2024 | pkg:cargo/wasm3 |
| 67 | cargo | yamux | 3 | Mar 13, 2026 | pkg:cargo/yamux |
| 68 | cargo | youki | 3 | Nov 5, 2025 | pkg:cargo/youki |
| 69 | cargo | zebra-chain | 3 | May 8, 2026 | pkg:cargo/zebra-chain |
| 70 | cargo | abi_stable | 2 | Jan 22, 2021 | pkg:cargo/abi_stable |
| 71 | cargo | acc_reader | 2 | Dec 26, 2021 | pkg:cargo/acc_reader |
| 72 | cargo | activitypub_federation | 2 | Mar 27, 2026 | pkg:cargo/activitypub_federation |
| 73 | cargo | actix-http | 2 | Aug 10, 2021 | pkg:cargo/actix-http |
| 74 | cargo | ammonia | 2 | Aug 8, 2021 | pkg:cargo/ammonia |
| 75 | cargo | apache-avro | 2 | Aug 9, 2022 | pkg:cargo/apache-avro |
| 76 | cargo | arenavec | 2 | Apr 1, 2021 | pkg:cargo/arenavec |
| 77 | cargo | arti | 2 | May 17, 2024 | pkg:cargo/arti |
| 78 | cargo | async-h1 | 2 | Jan 22, 2021 | pkg:cargo/async-h1 |
| 79 | cargo | biscuit-auth | 2 | Aug 1, 2024 | pkg:cargo/biscuit-auth |
| 80 | cargo | cache | 2 | Aug 8, 2021 | pkg:cargo/cache |
| 81 | cargo | cggmp21 | 2 | Nov 25, 2025 | pkg:cargo/cggmp21 |
| 82 | cargo | cggmp24 | 2 | Nov 25, 2025 | pkg:cargo/cggmp24 |
| 83 | cargo | coreos-installer | 2 | Aug 23, 2022 | pkg:cargo/coreos-installer |
| 84 | cargo | deepseek-tui-cli | 2 | May 14, 2026 | pkg:cargo/deepseek-tui-cli |
| 85 | cargo | deno_node | 2 | Jun 4, 2025 | pkg:cargo/deno_node |
| 86 | cargo | failure | 2 | Dec 31, 2020 | pkg:cargo/failure |
| 87 | cargo | flatbuffers | 2 | Dec 31, 2020 | pkg:cargo/flatbuffers |
| 88 | cargo | futures-task | 2 | Dec 31, 2020 | pkg:cargo/futures-task |
| 89 | cargo | futures-util | 2 | Dec 31, 2020 | pkg:cargo/futures-util |
| 90 | cargo | generator | 2 | Aug 8, 2021 | pkg:cargo/generator |
| 91 | cargo | gix-fs | 2 | May 13, 2026 | pkg:cargo/gix-fs |
| 92 | cargo | gix-ref | 2 | Apr 4, 2025 | pkg:cargo/gix-ref |
| 93 | cargo | gix-transport | 2 | Jul 28, 2025 | pkg:cargo/gix-transport |
| 94 | cargo | http | 2 | Dec 31, 2020 | pkg:cargo/http |
| 95 | cargo | image | 2 | Dec 31, 2020 | pkg:cargo/image |
| 96 | cargo | internment | 2 | Mar 5, 2021 | pkg:cargo/internment |
| 97 | cargo | lemmy_api_common | 2 | May 8, 2026 | pkg:cargo/lemmy_api_common |
| 98 | cargo | lettre | 2 | Aug 8, 2021 | pkg:cargo/lettre |
| 99 | cargo | libp2p-gossipsub | 2 | Mar 31, 2026 | pkg:cargo/libp2p-gossipsub |
| 100 | cargo | libp2p-rendezvous | 2 | Apr 7, 2026 | pkg:cargo/libp2p-rendezvous |
- cargoApr 22, 2026pkg:cargo/coreutils
- cargoMay 14, 2026pkg:cargo/wasmtime
- cargoMar 12, 2026pkg:cargo/deno
- cargoFeb 24, 2023pkg:cargo/openssl-src
- cargoDec 26, 2021pkg:cargo/rusqlite
- cargoNov 7, 2025pkg:cargo/apollo-router
- cargoApr 22, 2026pkg:cargo/rustfs
- cargoApr 24, 2026pkg:cargo/openssl
- cargoApr 24, 2026pkg:cargo/tough
- cargoMay 8, 2026pkg:cargo/zebrad
- cargoMay 6, 2026pkg:cargo/tauri
- cargoMar 4, 2026pkg:cargo/vaultwarden
- cargoAug 24, 2023pkg:cargo/cargo
- cargoMar 8, 2023pkg:cargo/cranelift-codegen
- cargoJun 4, 2025pkg:cargo/deno_runtime
- cargoJul 7, 2021pkg:cargo/hyper
- cargoApr 14, 2022pkg:cargo/simple-wayland-hotkey-daemon
- cargoSep 19, 2020pkg:cargo/sized-chunks
- cargoApr 4, 2025pkg:cargo/gitoxide
- cargoDec 31, 2020pkg:cargo/lock_api
- cargoJun 10, 2025pkg:cargo/matrix-sdk-crypto
- cargoMay 8, 2026pkg:cargo/russh
- cargoDec 26, 2021pkg:cargo/smallvec
- cargoNov 12, 2025pkg:cargo/sudo-rs
- cargoFeb 9, 2021pkg:cargo/xcb
- cargoMar 28, 2023pkg:cargo/comrak
- cargoMay 14, 2026pkg:cargo/deepseek-tui
- cargoJan 2, 2024pkg:cargo/evm
- cargoApr 4, 2025pkg:cargo/gitoxide-core
- cargoApr 4, 2025pkg:cargo/gix
- cargoApr 4, 2025pkg:cargo/gix-worktree-state
- cargoDec 26, 2021pkg:cargo/libpulse-binding
- cargoDec 26, 2021pkg:cargo/messagepack-rs
- cargoOct 20, 2023pkg:cargo/pleaser
- cargoAug 7, 2025pkg:cargo/quiche
- cargoSep 13, 2023pkg:cargo/routinator
- cargoMar 23, 2026pkg:cargo/salvo
- cargoDec 26, 2021pkg:cargo/actix-web
- cargoJan 16, 2024pkg:cargo/anoncreds-clsignatures
- cargoDec 31, 2020pkg:cargo/arr
- cargoMar 20, 2026pkg:cargo/astral-tokio-tar
- cargoAug 8, 2021pkg:cargo/cgc
- cargoDec 26, 2021pkg:cargo/ckb
- cargoMay 13, 2025pkg:cargo/crossbeam-channel
- cargoMar 12, 2021pkg:cargo/fltk
- cargoApr 4, 2025pkg:cargo/gix-index
- cargoSep 6, 2024pkg:cargo/gix-path
- cargoApr 4, 2025pkg:cargo/gix-worktree
- cargoJul 28, 2020pkg:cargo/grin
- cargoApr 7, 2021pkg:cargo/id-map
- cargoOct 13, 2025pkg:cargo/mongodb
- cargoSep 24, 2022pkg:cargo/pallet-ethereum
- cargoMar 4, 2026pkg:cargo/pingora-core
- cargoMar 10, 2026pkg:cargo/quinn-proto
- cargoDec 26, 2021pkg:cargo/raw-cpuid
- cargoOct 2, 2025pkg:cargo/risc0-zkvm
- cargoDec 14, 2025pkg:cargo/sequoia-openpgp
- cargoApr 1, 2021pkg:cargo/slice-deque
- cargoJan 10, 2026pkg:cargo/sm2
- cargoMay 21, 2022pkg:cargo/solana_rbpf
- cargoFeb 21, 2026pkg:cargo/static-web-server
- cargoMar 20, 2026pkg:cargo/tar
- cargoJan 4, 2023pkg:cargo/tokio
- cargoDec 26, 2021pkg:cargo/tremor-script
- cargoJan 16, 2024pkg:cargo/ursa
- cargoNov 8, 2024pkg:cargo/wasm3
- cargoMar 13, 2026pkg:cargo/yamux
- cargoNov 5, 2025pkg:cargo/youki
- cargoMay 8, 2026pkg:cargo/zebra-chain
- cargoJan 22, 2021pkg:cargo/abi_stable
- cargoDec 26, 2021pkg:cargo/acc_reader
- cargoMar 27, 2026pkg:cargo/activitypub_federation
- cargoAug 10, 2021pkg:cargo/actix-http
- cargoAug 8, 2021pkg:cargo/ammonia
- cargoAug 9, 2022pkg:cargo/apache-avro
- cargoApr 1, 2021pkg:cargo/arenavec
- cargoMay 17, 2024pkg:cargo/arti
- cargoJan 22, 2021pkg:cargo/async-h1
- cargoAug 1, 2024pkg:cargo/biscuit-auth
- cargoAug 8, 2021pkg:cargo/cache
- cargoNov 25, 2025pkg:cargo/cggmp21
- cargoNov 25, 2025pkg:cargo/cggmp24
- cargoAug 23, 2022pkg:cargo/coreos-installer
- cargoMay 14, 2026pkg:cargo/deepseek-tui-cli
- cargoJun 4, 2025pkg:cargo/deno_node
- cargoDec 31, 2020pkg:cargo/failure
- cargoDec 31, 2020pkg:cargo/flatbuffers
- cargoDec 31, 2020pkg:cargo/futures-task
- cargoDec 31, 2020pkg:cargo/futures-util
- cargoAug 8, 2021pkg:cargo/generator
- cargoMay 13, 2026pkg:cargo/gix-fs
- cargoApr 4, 2025pkg:cargo/gix-ref
- cargoJul 28, 2025pkg:cargo/gix-transport
- cargoDec 31, 2020pkg:cargo/http
- cargoDec 31, 2020pkg:cargo/image
- cargoMar 5, 2021pkg:cargo/internment
- cargoMay 8, 2026pkg:cargo/lemmy_api_common
- cargoAug 8, 2021pkg:cargo/lettre
- cargoMar 31, 2026pkg:cargo/libp2p-gossipsub
- cargoApr 7, 2026pkg:cargo/libp2p-rendezvous
Showing top 100 packages in cargo by CVE count. Data union of GitHub Security Advisories + OSV.dev (refreshed every 15 min).