Rust

Products

ProductCVEsExploitedLatest
Cargo1–May 25, 2026
pageant1–Sep 29, 2026

Exploited and recent CVEs

  • CVE-2026-102820 Medium 6.2 pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows) 0.2%
  • CVE-2026-5222 Low 2.3 Cargo can be coerced to share credentials between registries 0.5%