DEBIAN-CVE-2026-5222

Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crates in a registry could obtain the...

CVE-2026-5222

creationtimestamp| type| source ---|---|--- 2026-05-25 09:14:06+00:00| seen| https://bsky.app/profile/feedbot.unronritaro.net/post/3mmo5ahvngy2z 2026-05-25 11:00:10+00:00| seen| https://bsky.app/profile/planetmozilla.bsky.social/post/3mmod65ugme23 2026-05-25 16:06:18+00:00| seen|...