rust-lang cargo vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20233

Newest CVEs

• CVE-2023-40030

  Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

  rust-lang · cargo

  Medium6.1
• CVE-2023-38497

  Cargo not respecting umask when extracting crate archives

  rust-lang · cargo

  High7.8
• CVE-2022-46176

  Cargo did not verify SSH host keys

  rust-lang · cargo

  Medium5.3
• CVE-2022-36114

  Extracting malicious crates can fill the file system

  rust-lang · cargo

  Medium4.8
• CVE-2022-36113

  Extracting malicious crates can corrupt arbitrary files

  rust-lang · cargo

  Medium4.6