VulertSecurity VulertSecurity

Vulnerability Database · Ecosystem

crates.io vulnerabilities

crates.io is covered by 3,233 vulnerabilities in the Vulert Vulnerability Database, each with the severity, affected versions, workaround and the fix for the version you actually run.

Search all 3,233 vulnerabilities Malicious packages in crates.io Critical vulnerabilities only

crates.io at a glancelive
Vulnerabilities recorded
3,233
Critical
236
High
564
Medium / Low
625 / 190
Unrated
0
Last database update
22/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Severity in crates.io

How the vulnerabilities split

  • Critical 236
  • High 564
  • Medium 625
  • Low 190
  • Unrated 0

Totals add up to the 3,233 vulnerabilities Vulert records for crates.io, including entries with no severity published yet.

02 Most recent critical

Newest critical crates.io vulnerabilities

See all critical crates.io vulnerabilities →

03 Related ecosystems

Other platforms in this database

npm 230,688 Debian 106,974 Ubuntu 50,092 PyPI 26,494 Red Hat 24,060 Linux 15,912 Bitnami 9,947 Go 9,914 Alpine 8,588 Packagist 7,347
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

crates.io and the database

How many crates.io vulnerabilities does Vulert track?

crates.io is covered by 3,233 vulnerabilities, each with the severity, affected versions, workaround and fix where one exists.

How do I fix a vulnerability in crates.io?

Open the vulnerability for the package and version you run. It lists the vulnerable range, the fixed version to move to, and a workaround when no fix has been published yet.

Does Vulert monitor crates.io dependencies continuously?

Yes. Upload the manifest or SBOM for your application and Vulert keeps tracking those packages, alerting you when a new vulnerability affects a version you actually use.