# tokio (crates.io) vulnerabilities 4 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://crates.io/crates/tokio ## Advisories (4) ### [CVE-2026-115567](https://cve.now/CVE-2026-115567): Tokio: Race condition in \`tokio::time::Interval\` - Severity: Medium 5.8 - Published: Oct 23, 2026 - Affected: from 1.54.0, fixed in 1.54.1; from 1.54.0, fixed in 1.54.1. ### [CVE-2023-22466](https://cve.now/CVE-2023-22466): Tokio's reject\_remote\_clients configuration may get dropped when creating a Windows named pipe - Severity: Medium 5.4 - Published: Jan 4, 2023 - Affected: from 1.7.0, fixed in 1.18.4; from 1.19.0, fixed in 1.20.3; from 1.21.0, fixed in 1.23.1; from 1.7.0, fixed in 1.18.4; from 1.19.0, fixed in 1.20.3; from 1.21.0, fixed in 1.23.1. ### [CVE-2021-45710](https://cve.now/CVE-2021-45710): An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. - Severity: Unrated - Published: Dec 26, 2021 - Affected: from 0.1.14, fixed in 1.8.4; from 1.9.0, fixed in 1.13.1; from 0.1.14, fixed in 1.8.4; from 1.9.0, fixed in 1.13.1. ### [CVE-2021-38191](https://cve.now/CVE-2021-38191): An issue was discovered in the tokio crate before 1.8.1 for Rust. - Severity: Unrated - Published: Aug 8, 2021 - Affected: from 1.8.0, fixed in 1.8.1; from 1.7.0, fixed in 1.7.2; from 1.6.0, fixed in 1.6.3; from 0.3.0, fixed in 1.5.1; from 0.3.0, fixed in 1.5.1; from 1.6.0, fixed in 1.6.3; from 1.7.0, fixed in 1.7.2; from 1.8.0, fixed in 1.8.1. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/crates.io/tokio Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.