Rust-lang Cargo Vulnerabilities

Rust-lang Cargo vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

24 August 2023

Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
CVE-2023-40030
Rust-langCargo6.1MEDIUM

4 August 2023

Cargo not respecting umask when extracting crate archives
CVE-2023-38497
Rust-langCargo👾🟡7.8HIGH

11 January 2023

Cargo did not verify SSH host keys
CVE-2022-46176
Rust-langCargo5.3MEDIUM

14 September 2022

Extracting malicious crates can corrupt arbitrary files
CVE-2022-36113
Rust-langCargo4.6MEDIUM
Extracting malicious crates can fill the file system
CVE-2022-36114
Rust-langCargo4.8MEDIUM

No more vulnerabilities to load.