rust-lang cargo vulnerabilities
5 published CVEs name rust-lang cargo among the affected products.
- 5Published CVEs5 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-40030
Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
rust-lang · cargo
Medium6.1 - CVE-2023-38497
Cargo not respecting umask when extracting crate archives
rust-lang · cargo
High7.8 - CVE-2022-46176
Cargo did not verify SSH host keys
rust-lang · cargo
Medium5.3 - CVE-2022-36114
Extracting malicious crates can fill the file system
rust-lang · cargo
Medium4.8 - CVE-2022-36113
Extracting malicious crates can corrupt arbitrary files
rust-lang · cargo
Medium4.6