C
Vendor security profile
cargo
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs50
Critical4
CISA KEV0
Public exploit14
Patch rate%96
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
0
26
2
0
7
13
2
0
CVE KEV
CVE severity distribution
50toplam CVE
Critical4 (8%)
High15 (30%)
Medium23 (46%)
Low7 (14%)
Uncertain1 (2%)
Patch and exploitation view
%96
Verified patch
%0
CISA KEV
%28
Public exploit
48Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.8
CVE-2025-24890
gix-sec safe.directory protections absent for elevated administrators
G
Patch verifiedEPSS %0
-
CVE-2026-53600
Improper input validation
C
Patch verifiedEPSS %0
7.5
CVE-2026-46369
Nimiq: Validity store off by one error
N
Patch verifiedEPSS %1
6.9
CVE-2026-53531
ratex-parser has unbounded parser recursion that leads to stack overflow (process abort)
E
Patch verifiedEPSS %0
8.7
CVE-2026-53530
ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)
E
Patch verifiedEPSS %0
5.1
CVE-2026-54136
Windmill: Resource-scoped API tokens can read script contents outside their allowed path via scripts/list_search
WL
Patch verifiedEPSS %0
8.7
CVE-2026-75915
CodeWhale before 0.8.64 Environment Variable Leak via js_execution
H
Patch verifiedEPSS %1
8.7
CVE-2026-75914
CodeWhale before 0.8.64 Path Traversal via image_analyze symlink
H
Patch verifiedEPSS %1
8.5
CVE-2026-75913
CodeWhale before 0.8.64 Argument Injection via git_show
H
Patch verifiedEPSS %0
8.3
CVE-2026-75912
CodeWhale before 0.8.64 Argument Injection via git_blame
H
Patch verifiedEPSS %0