C
Vendor security profile
crates.io
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs67
Critical4
CISA KEV0
Public exploit20
Patch rate%39
Avg. CVSS6.7
12-month vulnerability rate
0
0
1
0
0
1
0
1
27
20
15
2
CVE KEV
CVE severity distribution
67toplam CVE
Critical4 (6%)
High29 (43%)
Medium30 (45%)
Low4 (6%)
Patch and exploitation view
%39
Verified patch
%0
CISA KEV
%30
Public exploit
26Patch available
0Partial
0Workaround
0Vendor: no patch
41Unknown
Latest vulnerabilities
2.0
CVE-2026-104855
Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state
B
Patch status unknownEPSS %0
5.9
CVE-2026-104843
uv: Path traversal on Windows through wheel extraction
A
Patch status unknownEPSS %0
5.4
CVE-2026-102342
Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
C
Patch status unknown
3.7
CVE-2026-102825
Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path
E
Patch status unknownEPSS %0
4.3
CVE-2026-102824
Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange
E
Patch status unknownEPSS %0
7.5
CVE-2026-102823
russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened
E
Patch status unknownEPSS %0
3.7
CVE-2026-102822
russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic
E
Patch status unknownEPSS %0
6.5
CVE-2026-102821
Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey
E
Patch status unknownEPSS %0
6.2
CVE-2026-102820
pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)
E
Patch status unknownEPSS %0
6.5
CVE-2026-61670
microsandbox: Secret values exposed in world-readable process arguments
S
Patch status unknownEPSS %0