CVE-2021-38191: Tokio

Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.

Affected products

• Tokio Tokio: from 0.3.0, before 1.5.1 (fixed in 1.5.1); from 1.6.0, before 1.6.3 (fixed in 1.6.3); from 1.7.0, before 1.7.2 (fixed in 1.7.2); version 1.8.0 only

Published 2021-08-08. Last modified 2026-06-17.