rustcrypto vulnerabilities
Recent CVEs affecting rustcrypto products. 1 tracked.
rustcrypto has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-17. Highest priority: CVE-2026-50185 (score 18/100).
- CVE-2026-50185 LOW 3.3 UPGRADE RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in
FAQ
How do I fix rustcrypto vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rustcrypto being exploited right now?
None of the tracked rustcrypto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rustcrypto CVE should I patch first?
CVE-2026-50185 currently ranks highest (18/100): RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in.