cargo has 2 CVEs on record.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: —
Publish → KEV: —
Last 90 days: 0 prev 2

Weakness classes

Products

cargo 2

Follow cargo:RSS feed Save a search →Embed badge ↗

2

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-5223MediumCargo crates in third party registries can override the cached source of other crates28
CVE-2026-5222LowCargo can be coerced to share credentials between registries14

cargo vulnerabilities

CVEs affecting cargo, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-5222Low

Cargo can be coerced to share credentials between registries

Cargo can be coerced to share credentials between registries

▾ Sunlitcargo · cargoEPSS 0.48%via GHSA

CVE-2026-5223Medium

Cargo crates in third party registries can override the cached source of other crates

Cargo crates in third party registries can override the cached source of other crates

▾ Sunlitcargo · cargoEPSS 0.29%via GHSA

cargo vulnerabilities (CVEs) · VulnSea