Rust CVE-2025-5791

Command injection via Windows CreateProcess argument parsing affects multiple language runtimes and tooling (Node.js, PH

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the ele

In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer ove

library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginni

The Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method which, if overridden, c

In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once fo

In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe c

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration

Rust is a programming language. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no auth

The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contai

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. Rated medium severity (C

The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. Rated med