PT-2026-99103

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting XSS in the Mediawiki - Cargo extension. This occurs specifically within CargoExpo...

PT-2026-98871

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation in the Mediawiki - Cargo extension allows Stored Cross-Site Scripting XSS, a condition where malicious scripts are...

CVE-2026-96877: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

PT-2026-99102

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation leads to a stored cross-site scripting XSS issue. This occurs when the application fails to properly sanitize...

CVE-2026-96875: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Stored XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

PT-2026-99104

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting XSS through the Cargo Drilldown full-text search. Reflected XSS occurs when an...

PT-2026-99105

Name of the Vulnerable Software and Affected Versions Mediawiki - Cargo extension versions prior to 3.9.5 Description Improper neutralization of input during web page generation leads to a Reflected Cross-Site Scripting XSS issue. Cross-Site Scripting is a flaw that allows an attacker to inject...

CVE-2026-96876: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

CVE-2026-96878: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - Cargo extension allows Reflected XSS. This issue affects Mediawiki - Cargo extension: through 3.9.4...

OPENSUSE-SU-2026:11861-1 obs-service-cargo-7.2.2-3.1 on GA media

These are all security issues fixed in the obs-service-cargo-7.2.2-3.1 package on the GA media of openSUSE Tumbleweed...

vtcode-utility-tool-specs (>=0.134.1, <=0.141.9) potentially affected by CVE-2026-64684 via rmcp (2.0.0)

rmcp CARGO version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on rmcp and may be impacted: - vtcode-utility-tool-specs =0.134.1, =0.141.9 Source cves: CVE-2026-64684 Source advisory: OSV:GHSA-9G45-5XWM-F3WC...

OPENSUSE-SU-2026:21870-1 Security update for openai-codex

This update for openai-codex fixes the following issues: Changes in openai-codex: Update to version 0.154.0: Experimental worktree support for isolated checkouts of new or forked sessions, with browse and resume Answer questions inline while Codex keeps working, keeping the main draft Vim R repla...

abscissa (>=0.0.1, <=0.0.4), aingle_zk (>=0.1.0, <=0.9.1) +329 more potentially affected by unknown CVE via clear_on_drop (>=0.2.3, <=0.2.5)

clearondrop CARGO version =0.2.3, =0.0.1, =0.1.0, =4.0.0, =0.12.0, =0.2.0, =1.0.0-pre.0, =0.1.0, =2.0.0, =0.1.0, =3.1.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0283...

cargo-audit-0.22.2~git0.281452c-3.1 on GA media (moderate)

cargo-audit-0.22.2git0.281452c-3.1 on GA media Announcement ID: openSUSE-SU-2026:11730-1 Rating: moderate Cross-References: CVE-2026-82247 CVE-2026-82250 CVE-2026-82251 CVE-2026-82253 CVE-2026-82254 CVSS scores: CVE-2026-82247 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2026-82247...

OPENSUSE-SU-2026:11741-1 cargo-c-0.10.25-1.1 on GA media

These are all security issues fixed in the cargo-c-0.10.25-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.98.1-1.hum1 aarch64, x8664 clippy-1.98.1-1.hum1 aarch64, x8664 rust-1.98.1-1.hum1 aarch64, x8664 rust-analyzer-1.98.1-1.hum1 aarch64, x8664 rust-debugger-common-1.98.1-1.hum1 noarch...

benchmark_sampledata (>=0.1.0, <=0.1.5), dircpy (>=0.2.1, <=0.3.17) +6 more potentially affected by unknown CVE via unzip (0.1.0)

unzip CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on unzip and may be impacted: - benchmarksampledata =0.1.0, =0.2.1, =0.1.5, =0.1.0, =0.3.0, =0.3.0, =0.3.4, =0.3.5 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0297...

OPENSUSE-SU-2026:11730-1 cargo-audit-0.22.2~git0.281452c-3.1 on GA media

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-89708

These are all security issues fixed in the cargo-audit-0.22.2git0.281452c-3.1 package on the GA media of openSUSE Tumbleweed...

Malicious Package

Overview ecto-cargo-wk1tm59a is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...