tokio (crates.io)
Advisories
23
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 1.54.1 or later clears every advisory below that has a fix.
Upgrade commands
cargo
cargo update -p tokio --precise 1.54.1Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-5wjr-9356-4wc8 Tokio: Race condition in `tokio::time::Interval` |
Medium EPSS 0.11% |
>= 1.54.0, < 1.54.1 | 1.54.1 |
| GHSA-5wjr-9356-4wc8 Tokio: Race condition in `tokio::time::Interval` |
Medium EPSS 0.11% |
>= 1.54.0, < 1.54.1 | 1.54.1 |
| RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety |
Not rated yet | >= 0.3.2, < 1.51.6>= 1.52.0, < 1.53.3 | 1.51.61.53.3 |
| GHSA-rr8g-9fpq-6wmg Tokio broadcast channel calls clone in parallel, but does not require `Sync` |
Low | >= 1.39.0, < 1.43.1 | 1.43.1 |
| GHSA-rr8g-9fpq-6wmg Tokio broadcast channel calls clone in parallel, but does not require `Sync` |
Low | >= 1.44.0, < 1.44.2 | 1.44.2 |
| GHSA-rr8g-9fpq-6wmg Tokio broadcast channel calls clone in parallel, but does not require `Sync` |
Low | >= 0.2.5, < 1.38.2 | 1.38.2 |
| GHSA-rr8g-9fpq-6wmg Tokio broadcast channel calls clone in parallel, but does not require `Sync` |
Low | >= 0.2.5, < 1.38.2>= 1.39.0, < 1.42.1>= 1.43.0, < 1.43.1>= 1.44.0, < 1.44.2 | 1.38.21.42.11.43.11.44.2 |
| GHSA-4q83-7cq4-p6wg `tokio::io::ReadHalf<T>::unsplit` is Unsound |
Low | >= 0.2.0, < 1.18.5 | 1.18.5 |
| GHSA-4q83-7cq4-p6wg `tokio::io::ReadHalf<T>::unsplit` is Unsound |
Low | >= 0.2.0, < 1.18.5>= 1.19.0, < 1.20.4>= 1.21.0, < 1.24.2 | 1.18.51.20.41.24.2 |
| GHSA-4q83-7cq4-p6wg `tokio::io::ReadHalf<T>::unsplit` is Unsound |
Low | >= 1.21.0, < 1.24.2 | 1.24.2 |
| GHSA-4q83-7cq4-p6wg `tokio::io::ReadHalf<T>::unsplit` is Unsound |
Low | >= 1.19.0, < 1.20.4 | 1.20.4 |
| GHSA-7rrj-xr53-82p7 Tokio reject_remote_clients configuration may get dropped when creating a Windows named pipe |
Medium EPSS 0.59% |
>= 1.7.0, < 1.18.4 | 1.18.4 |
| GHSA-7rrj-xr53-82p7 Tokio reject_remote_clients configuration may get dropped when creating a Windows named pipe |
Medium EPSS 0.59% |
>= 1.7.0, < 1.18.4>= 1.19.0, < 1.20.3>= 1.21.0, < 1.23.1 | 1.18.41.20.31.23.1 |
| GHSA-7rrj-xr53-82p7 Tokio reject_remote_clients configuration may get dropped when creating a Windows named pipe |
Medium EPSS 0.59% |
>= 1.21.0, < 1.23.1 | 1.23.1 |
| GHSA-7rrj-xr53-82p7 Tokio reject_remote_clients configuration may get dropped when creating a Windows named pipe |
Medium EPSS 0.59% |
>= 1.19.0, < 1.20.3 | 1.20.3 |
| RUSTSEC-2021-0124 Race Condition in tokio |
High EPSS 1.24% |
>= 1.9.0, < 1.13.1 | 1.13.1 |
| RUSTSEC-2021-0124 Race Condition in tokio |
High EPSS 1.24% |
>= 0.1.14, < 1.8.4 | 1.8.4 |
| RUSTSEC-2021-0124 Race Condition in tokio |
High EPSS 1.24% |
>= 0.1.14, < 1.8.4>= 1.9.0, < 1.13.1 | 1.8.41.13.1 |
| RUSTSEC-2021-0072 Race condition in tokio |
Medium EPSS 0.83% |
>= 1.7.0, < 1.7.2 | 1.7.2 |
| RUSTSEC-2021-0072 Race condition in tokio |
Medium EPSS 0.83% |
>= 1.6.0, < 1.6.3 | 1.6.3 |
| RUSTSEC-2021-0072 Race condition in tokio |
Medium EPSS 0.83% |
>= 1.8.0, < 1.8.1 | 1.8.1 |
| RUSTSEC-2021-0072 Race condition in tokio |
Medium EPSS 0.83% |
>= 0.3.0, < 1.5.1 | 1.5.1 |
| RUSTSEC-2021-0072 Race condition in tokio |
Medium EPSS 0.83% |
>= 0.3.0, < 1.5.1>= 1.6.0, < 1.6.3>= 1.7.0, < 1.7.2>= 1.8.0, < 1.8.1 | 1.5.11.6.31.7.21.8.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor