rust
1.100.0Empowering everyone to build reliable and efficient software.
- Maintenance
- Active8307 commits in 3 months · bus factor 12
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 6 advisories1 critical, 1 high, 3 medium, 1 low · Scorecard 7.1/10
- Supported versions
- 1 line supportednewest 1.99 · 11 ended
122k stars · 16.7k forks · 12.6k open issues · last release 2 days ago · data checked 46 minutes ago
Security advisories
All advisories on GitHubThe 6 most recent advisories published by the maintainers: 1 critical, 1 high, 3 medium, 1 low. Check the patched version against the one you run.
- mediumCVE-2025-11233Oct 1, 2025Rust standard library didn't detect all path separators on Cygwin
- Affected
- >= 1.87.0, < 1.89.0
- Patched in
- 1.89.0
- lowCVE-2024-43402Sep 4, 2024`std::process::Command` batch files argument escaping could be bypassed with trailing whitespace or periods
- Affected
- < 1.81.0
- Patched in
- 1.81.0
- criticalCVE-2024-24576Apr 9, 2024`std::process::Command` did not properly escape arguments of batch files on Windows
- Affected
- < 1.77.2
- Patched in
- 1.77.2
- highCVE-2022-21658Jan 20, 2022Race condition in std::fs::remove_dir_all
- Affected
- <= 1.58.0
- Patched in
- 1.58.1
- mediumCVE-2021-42574Nov 1, 2021rustc and bidirectional-override codepoints in source code
- Affected
- <= 1.56.0
- Patched in
- 1.56.1
- mediumCVE-2019-16760Sep 30, 2019Cargo prior to Rust 1.26.0 may download the wrong dependency
- Affected
- <= 1.25.0