73 matches found
Amazon Linux 2023 : cargo-c (ALAS2023-2026-2064)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2064 advisory. libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap...
cargo-c-0.10.23-2.1 on GA media (moderate)
cargo-c-0.10.23-2.1 on GA media Announcement ID: openSUSE-SU-2026:11513-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...
PT-2026-76439
These are all security issues fixed in the cargo-c-0.10.23-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11513-1 cargo-c-0.10.23-2.1 on GA media
These are all security issues fixed in the cargo-c-0.10.23-2.1 package on the GA media of openSUSE Tumbleweed...
Important: rust-cargo-c
Issue Overview: gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in...
cargo-c-0.10.23-1.1 on GA media (moderate)
cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...
OPENSUSE-SU-2026:11210-1 cargo-c-0.10.23-1.1 on GA media
These are all security issues fixed in the cargo-c-0.10.23-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-3PV8-6F4R-FFG2 vulnerabilities
Vulnerabilities for packages: buck2, rye, zizmor, cleave, sccache, litmus, wasm-pack, wasmcloud, rustup, deno, qdrant, cargo-c...
GHSA-9857-6MW7-FQ2M vulnerabilities
Vulnerabilities for packages: cargo-c, cargo-audit...
GHSA-3PV8-6F4R-FFG2 vulnerabilities
Vulnerabilities for packages: typst, rye, bootc, fnm, cargo-c, rustup, wasmcloud, wasm-pack, buck2, deno, litmus, sccache, qdrant, zizmor, cleave...
GHSA-9857-6MW7-FQ2M vulnerabilities
Vulnerabilities for packages: cargo-audit, cargo-c...
GHSA-CQ8V-F236-94QC vulnerabilities
Vulnerabilities for packages: mountpoint-s3, linkerd-network-validator, netavark, zellij, hurl, sdp-k8s-injector, rustup, zola, uutils, just, cargo-c, berg, starship, parseable, samply, yazi, linkerd2, wadm, efs-utils, wasmcloud, ruff, yara-x, rav1e, uv, vector, kdash, buck2, lychee, rye, ntpd-rs...
GHSA-CQ8V-F236-94QC vulnerabilities
Vulnerabilities for packages: mise, sentry-cli, rye, atuin, just, starship, uutils, watchexec, nushell, parseable, ruff, pixi, uv, lychee, virtiofsd, yara-x, zellij, zola, efs-utils, chaos-tproxy, bootc, berg, pgcat, wasmcloud, wasmtime, biome, linkerd-network-validator, guestproxyagent, zed,...
Ubuntu 25.10 : cargo-c vulnerability (USN-8139-1)
The remote Ubuntu 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8139-1 advisory. It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processin...
Ubuntu: Security Advisory (USN-8139-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-8139-1: cargo-c vulnerability
It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...
PT-2026-29964
It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary directories outside th...
Fedora: Security Advisory (FEDORA-2026-82783c3c1d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2026-7624cdcfb6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
