rs-soroban-sdk vulnerabilities and fixes

Recent CVEs affecting rs-soroban-sdk, with upgrade or downgrade steps. 2 tracked.

Also searched as: rs soroban sdk.

rs-soroban-sdk has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-03-13. Highest priority: CVE-2026-24889 (score 32/100).

• CVE-2026-32322 MEDIUM 5.3 UPGRADE soroban-sdk is a Rust SDK for Soroban contracts
• CVE-2026-24889 MEDIUM 5.3 UPGRADE soroban-sdk is a Rust SDK for Soroban contracts

FAQ

How do I fix rs-soroban-sdk vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rs-soroban-sdk being exploited right now?

None of the tracked rs-soroban-sdk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rs-soroban-sdk CVE should I patch first?

CVE-2026-24889 currently ranks highest (32/100): soroban-sdk is a Rust SDK for Soroban contracts.

← Back to latest CVEs