rust-analyzer

Direct Vulnerabilities

Known vulnerabilities in the rust-analyzer package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	*
H Integer Overflow or Wraparound	<0:1.97.1-2.hum1
M Cross-site Scripting (XSS)	*
M Expired Pointer Dereference	<0:1.96.1-1.hum1
M Information Exposure	<0:1.96.1-1.hum1
M Allocation of Resources Without Limits or Throttling	<0:1.96.1-1.hum1
L Numeric Range Comparison Without Minimum Check	<0:1.96.1-1.hum1
L Allocation of Resources Without Limits or Throttling	<0:1.96.1-1.hum1
L Improper Validation of Specified Quantity in Input	<0:1.96.1-1.hum1
M Directory Traversal	<0:1.97.1-2.hum1
H Use After Free	<0:1.99.0-1.hum1
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M Unchecked Input for Loop Condition	*
M Cross-site Scripting (XSS)	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
M Improper Validation of Specified Index, Position, or Offset in Input	*
M Reachable Assertion	*
H Information Exposure	<0:1.96.1-1.hum1
H Inefficient Regular Expression Complexity	<0:1.97.0-1.1.hum1
M Allocation of Resources Without Limits or Throttling	<0:1.96.0-1.hum1
H Inefficient Regular Expression Complexity	<0:1.96.1-1.hum1
H Improper Verification of Source of a Communication Channel	<0:1.96.0-1.hum1
M Uncontrolled Recursion	<0:1.96.0-1.hum1
M Improper Cross-boundary Removal of Sensitive Data	<0:1.96.1-1.hum1
M Comparison Using Wrong Factors	<0:1.96.1-1.hum1
H Authentication Bypass by Primary Weakness	<0:1.96.1-1.hum1
M Reliance on Cookies without Validation and Integrity Checking	<0:1.96.1-1.hum1
M Authentication Bypass	<0:1.96.1-1.hum1
H Improperly Implemented Security Check for Standard	<0:1.96.1-1.hum1
H Improper Verification of Cryptographic Signature	<0:1.96.1-1.hum1
H Improper Certificate Validation	<0:1.96.1-1.hum1
H Improper Handling of Highly Compressed Data (Data Amplification)	<0:1.96.0-1.hum1
H Improper Certificate Validation	<0:1.96.0-1.hum1
M Information Exposure	<0:1.96.1-1.hum1
H Unchecked Input for Loop Condition	<0:1.97.0-1.1.hum1
H Allocation of Resources Without Limits or Throttling	<0:1.96.1-1.hum1
H Out-of-bounds Read	<0:1.98.1-1.hum1
L Improper Validation of Unsafe Equivalence in Input	*
M Improper Certificate Validation	*
L Improper Restriction of Communication Channel to Intended Endpoints	<0:1.98.0-1.hum1
M Exposure of Data Element to Wrong Session	<0:1.98.0-1.hum1
L Use After Free	<0:1.98.0-1.hum1
H Out-of-bounds Read	<0:1.84.1-1.el10_0.4
L Use After Free	*
M CRLF Injection	*
H Out-of-bounds Read	<0:1.92.0-2.el10_2
L Time-of-check Time-of-use (TOCTOU)	*
M Out-of-bounds Write	*
L Directory Traversal	*
M Information Exposure	*
M Improper Certificate Validation	*
M Allocation of Resources Without Limits or Throttling	*
M CVE-2026-69198	*
M Directory Traversal	*
M Misinterpretation of Input	*
M Cleartext Transmission of Sensitive Information	*
M Comparison Using Wrong Factors	*
L Out-of-bounds Write	*
M Allocation of Resources Without Limits or Throttling	*
M Unchecked Input for Loop Condition	*
M Off-by-one Error	*
M Integer Overflow or Wraparound	*
L Information Exposure	*
L Improperly Implemented Security Check for Standard	*
L Improper Certificate Validation	*
M Improper Certificate Validation	*
L Authentication Bypass by Primary Weakness	*
M Inefficient Regular Expression Complexity	*
M Executable Regular Expression Error	*
M Link Following	*
M Expired Pointer Dereference	*
M Allocation of Resources Without Limits or Throttling	*
M Deserialization of Untrusted Data	*
M Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element	*
M Origin Validation Error	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Neutralization	*
M Uncontrolled Recursion	*
M Double Free	*

Vulnerability

Vulnerable Version

Directory Traversal