Skip to main content
cve.nowby Sazabi
← crates.io
crates.ioPackage

tokio

4 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 medium
Registry
crates.io

Advisories 4

  • CVE-2026-115567Medium 5.8

    Tokio: Race condition in `tokio::time::Interval`

    Affected: from 1.54.0, fixed in 1.54.1; from 1.54.0, fixed in 1.54.1.

  • CVE-2023-22466Medium 5.4

    Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipe

    Affected: from 1.7.0, fixed in 1.18.4; from 1.19.0, fixed in 1.20.3; from 1.21.0, fixed in 1.23.1; from 1.7.0, fixed in 1.18.4; from 1.19.0, fixed in 1.20.3; from 1.21.0, fixed in 1.23.1.

  • An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust.

    Affected: from 0.1.14, fixed in 1.8.4; from 1.9.0, fixed in 1.13.1; from 0.1.14, fixed in 1.8.4; from 1.9.0, fixed in 1.13.1.

  • An issue was discovered in the tokio crate before 1.8.1 for Rust.

    Affected: from 1.8.0, fixed in 1.8.1; from 1.7.0, fixed in 1.7.2; from 1.6.0, fixed in 1.6.3; from 0.3.0, fixed in 1.5.1; from 0.3.0, fixed in 1.5.1; from 1.6.0, fixed in 1.6.3; from 1.7.0, fixed in 1.7.2; from 1.8.0, fixed in 1.8.1.