abel (>=0.1.0, <=0.1.1), abel-core (>=0.1.0, <=0.1.1) +161 more potentially affected by unknown CVE via smallstr (>=0.1.0, <=0.3.1)

smallstr CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.8.1, =0.1.0, =0.1.20, =2.1.0, =0.4.0-beta.1, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0215...

abscissa (>=0.4.0, <=0.6.0-pre.1), abscissa_core (>=0.4.0, <=0.6.0-pre.1) +121 more potentially affected by unknown CVE via gumdrop (>=0.1.0, <=0.8.1)

gumdrop CARGO version =0.1.0, =0.4.0, =0.4.0, =0.5.0, =0.1.1, =0.1.0, =0.2.0, =1.0.0, =1.0.6, =1.0.8, =1.0.9, =1.0.9, =1.0.12 - amdguid-glium 1.0.13 - amdguid-glow 1.0.13 - amdguid-wayland 1.0.13 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0214...

cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries

A flaw was found in Cargo. When processing crate tarballs from third-party registries, Cargo mishandled symbolic links symlinks embedded within these archives. This vulnerability enables a malicious crate to overwrite the source code of another crate originating from the same registry. Such an...

marked-sanitizer (0.0.0) potentially affected by unknown CVE via ammonia (3.1.4)

ammonia CARGO version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ammonia and may be impacted: - marked-sanitizer 0.0.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0213...

MAL-2026-10893 Malicious code in ecto-cargo-wk1tm59a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee496f01ecebc77637213e597ba523c8cccda7efcd65e7ad2e700d804553dd29 Package [email protected] exhibits several contextual red flags worth human review: a randomized-suffix name pattern -wk1tm59a typical of...

Malicious code in ecto-cargo-wk1tm59a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee496f01ecebc77637213e597ba523c8cccda7efcd65e7ad2e700d804553dd29 Package [email protected] exhibits several contextual red flags worth human review: a randomized-suffix name pattern -wk1tm59a typical of...

[SECURITY] Fedora 44 Update: uv-0.11.28-1.fc44

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...

[SECURITY] Fedora 43 Update: rust-cargo-rpmstatus-0.2.5-2.fc43

Cargo-tree for RPM packaging...

[SECURITY] Fedora 44 Update: rust-cargo-rpmstatus-0.2.5-2.fc44

Cargo-tree for RPM packaging...

armature-diesel (0.1.0), aruna_policy (>=0.1.0, <=0.1.2) +112 more potentially affected by unknown CVE via diesel (>=2.0.0, <=2.3.4)

diesel CARGO version =2.0.0, =0.1.0, =0.1.0, =0.6.0, =0.1.0, =0.1.0, =0.0.6, =0.1.1, =0.1.5, =0.1.0, =0.1.2, =0.1.6 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GGXF-9F6J-W742...

libcrux-aead (>=0.0.4-pre.1, <=0.0.8) potentially affected by unknown CVE via libcrux-aesgcm (>=0.0.4, <=0.0.8-rc.2)

libcrux-aesgcm CARGO version =0.0.4, =0.0.4-pre.1, =0.0.8 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0211...

agora (>=0.0.3, <=0.1.2), ai-usvg (0.47.0) +271 more potentially affected by unknown CVE via rustybuzz (>=0.1.1, <=0.20.1)

rustybuzz CARGO version =0.1.1, =0.0.3, =0.1.0, =0.0.2, =0.0.2, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0206...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.97.0-1.1.hum1 aarch64, x8664 clippy-1.97.0-1.1.hum1 aarch64, x8664 rust-1.97.0-1.1.hum1 aarch64, x8664 rust-analyzer-1.97.0-1.1.hum1 aarch64, x8664...

cargo-c-0.10.23-1.1 on GA media (moderate)

cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...

async-tftp (>=0.3.1, <=0.3.6), blindspot (>=1.0.0, <=1.2.2) +8 more potentially affected by CVE-2026-53600 via async-tar (>=0.1.2, <=0.5.1)

async-tar CARGO version =0.1.2, =0.3.1, =1.0.0, =0.7.0, =0.9.0, =0.2.0, =6.1.0, =0.6.0, =0.0.1, =0.0.2 Source cves: CVE-2026-53600 Source advisory: OSV:GHSA-35RM-7J9C-2F7M...

blyss-rs (0.2.0), lunarbase-pmm-math (>=0.1.0, <=0.2.6) +10 more potentially affected by unknown CVE via ruint (>=1.8.0, <=1.17.2)

ruint CARGO version =1.8.0, =0.1.0, =22.0.2, =22.2.0, =0.3.0, =0.3.0, =0.1.0, =0.3.0, =0.1.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0220...

OPENSUSE-SU-2026:11210-1 cargo-c-0.10.23-1.1 on GA media

These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed...

ratex-layout (0.0.3) potentially affected by CVE-2026-53531 via ratex-parser (0.0.3)

ratex-parser CARGO version 0.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ratex-parser and may be impacted: - ratex-layout 0.0.3 Source cves: CVE-2026-53531 Source advisory: OSV:GHSA-4W5H-HX6R-28Q7...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35381 via uu_cut (>=0.0.14, <=0.0.16)

uucut CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35381 Source advisory: OSV:GHSA-PMFC-4WJJ-GMHX...

coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35366 via uu_printenv (>=0.0.14, <=0.0.16)

uuprintenv CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35366 Source advisory: OSV:GHSA-P7H3-7Q52-72W8...