167 matches found
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9
CVE-2026-5222 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30
CVE-2026-5222 affecting package rust for versions less than 1.75.0-30. A patched version of the package is available...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...
AZL-88281 CVE-2026-5222 affecting package rust for versions less than 1.90.0-9
Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a registry could obtain the...
Cargo 安全漏洞
Cargo is a Rust package manager open-sourced by The Rust Programming Language. A security vulnerability exists in Cargo that stems from the incorrect handling of symbolic links in a crate tarball downloaded from a third-party registry, which could lead to a malicious crate overwriting the source...
[SECURITY] Fedora 42 Update: uv-0.11.11-1.fc42
An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...
async-std-resolver (>=0.25.0-alpha.1, <=0.25.0-alpha.5), ezk-sip-ua (>=0.5.0, <=0.7.1) +5 more potentially affected by unknown CVE via hickory-proto (>=0.25.0-alpha.1, <=0.25.0-alpha.5)
hickory-proto CARGO version =0.25.0-alpha.1, =0.25.0-alpha.1, =0.5.0, =0.25.0-alpha.1, =0.25.0-alpha.5 - hickory-resolver 0.25.0-alpha.1 - hickory-server 0.25.0-alpha.1 - shadowsocks 1.22.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3V94-MW7P-V465...
CVE-2026-34743 affecting package rust for versions less than 1.90.0-7
CVE-2026-34743 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28
CVE-2026-34743 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-33056 affecting package rust for versions less than 1.90.0-7
CVE-2026-33056 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
CVE-2026-33055 affecting package rust for versions less than 1.90.0-7
CVE-2026-33055 affecting package rust for versions less than 1.90.0-7. A patched version of the package is available...
CVE-2026-33055 affecting package rust for versions less than 1.75.0-28
CVE-2026-33055 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-33056 affecting package rust for versions less than 1.75.0-28
CVE-2026-33056 affecting package rust for versions less than 1.75.0-28. A patched version of the package is available...
CVE-2026-25727 affecting package rust for versions less than 1.72.0-15
CVE-2026-25727 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...
CVE-2025-58160 affecting package rust for versions less than 1.72.0-15
CVE-2025-58160 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...
CVE-2026-25541 affecting package rust for versions less than 1.72.0-15
CVE-2026-25541 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...
CVE-2026-27171 affecting package rust for versions less than 1.72.0-15
CVE-2026-27171 affecting package rust for versions less than 1.72.0-15. A patched version of the package is available...
CVE-2026-25727 affecting package rust for versions less than 1.90.0-6
CVE-2026-25727 affecting package rust for versions less than 1.90.0-6. A patched version of the package is available...