Skip to content

Product

crates.io rocket vulnerabilities

2 published CVES affecting crates.io rocket, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest crates.io rocket CVEs

Newest publication first

  1. CVE-2021-29935 Use after free in Rocket

    Published
    HighCVSS 7.3 EPSS 1.0%

    An issue was discovered in the rocket crate before 0.4.7 for Rust. uri::Formatter can have a use-after-free if a user-provided function panics.

  2. CVE-2020-35882 Data races in rocket

    Published
    HighCVSS 8.1 EPSS 0.97%

    An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.