Skip to content
OpenAdvisories

Vendor

tokio-rs

7 known vulnerabilities.

Products

tokio 2 mio 1 axum-core 1 slab 1 tracing 1 bytes 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-27308

    Mio's tokens for named pipes may be delivered after deregistration

    Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid tokens that correspond to named pipes that have already been deregistered from the mio registry. The impact of this vulnerability depends …

    tokio-rs mio cargo-audit zellij Azure Linux Wolfi crates.io
  • High 7.5
    CVE-2022-3212

    DoS in axum-core due to missing request size limit

    <bytes::Bytes as axum_core::extract::FromRequest>::from_request would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large (or infinite) body your server might run out of memory and crash. This …

    tokio-rs axum-core axum-core crates.io