SUSE SLES16 Security Update : cargo-c (SUSE-SU-2026:20096-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20096-1 advisory. - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discardallmessages bsc1243179 - CVE-2025-58160:...

openSUSE 16 Security Update : cargo-c (openSUSE-SU-2026:20060-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20060-1 advisory. - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discardallmessages bsc1243179 - CVE-2025-58160: tracing-subscriber:...

MiracleLinux 9 : rust-1.66.1-2.el9 (AXSA:2023-6341:10)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6341:10 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from...

MiracleLinux 8 : rust-toolset:rhel8 (AXSA:2023-6349:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6349:01 advisory. rust-cargo: cargo does not respect the umask when extracting dependencies CVE-2023-38497 Tenable has extracted the preceding description block directly from...

OPENSUSE-SU-2026:20060-1 Security update for cargo-c

This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discardallmessages bsc1243179 - CVE-2025-58160: tracing-subscriber: Fixed log pollution bsc1249012 - CVE-2024-12224: idna: Fixed improper validation of Punycode labels...

SUSE-SU-2026:20096-1 Security update for cargo-c

This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discardallmessages bsc1243179 - CVE-2025-58160: tracing-subscriber: Fixed log pollution bsc1249012 - CVE-2024-12224: idna: Fixed improper validation of Punycode labels...

CVE-2023-29134

An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit...

CVE-2022-26169

Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the refcode parameter...

http-api-problem (>=0.23.0, <=0.50.2) potentially affected by CVE-2026-22256 via salvo (>=0.9.7, <=0.11.6)

salvo CARGO version =0.9.7, =0.23.0, =0.50.2 Source cves: CVE-2026-22256 Source advisory: OSV:GHSA-RJF8-2WCW-F6MP...

http-api-problem (>=0.23.0, <=0.50.2) potentially affected by CVE-2026-22257 via salvo (>=0.9.7, <=0.11.6)

salvo CARGO version =0.9.7, =0.23.0, =0.50.2 Source cves: CVE-2026-22257 Source advisory: OSV:GHSA-54M3-5FXR-2F3J...

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: lychee, rust-analyzer, oranda, zed, pixi, yara-x, fd, yazi, cargo-c, ruff, wadm, wasmcloud, samply, cargo-audit, starship, deno, oxipng, nushell...

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: wasmcloud, oxipng, wadm, zed, lychee, starship, samply, pixi, yazi, rust-analyzer, deno, ruff, cargo-audit, ztunnel, fd, cargo-c, nushell, oranda, yara-x...

acme-compilers (>=0.2.2, <=0.2.4), acvm (>=0.23.0, <=0.26.1) +295 more potentially affected by unknown CVE via rkyv (>=0.1.1, <=0.7.45)

rkyv CARGO version =0.1.1, =0.2.2, =0.23.0, =0.23.0, =0.0.1, =0.2.0, =0.39.0, =0.23.0, =0.26.1 - cairn-import-geonames 0.0.2-alpha - cairn-import-oa 0.0.2-alpha - cairn-import-osm 0.0.2-alpha - cairn-import-wof 0.0.2-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0001...

Finnish Authorities Detain Crew After Undersea Internet Cable Severed

After a sudden internet cable break between Finland and Estonia, authorities have seized the cargo ship Fitburg. With two crew members arrested and sanctioned steel found on board, investigators are now probing if this was an accident or a deliberate act of hybrid warfare...

Cross Site Scripting (XSS)

mediawiki/cargo is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input sanitization during web page generation, which allows an attacker to inject and store malicious scripts that are executed in the context of other users when the affected content is viewed...

rust-network-mgr (>=0.1.0, <=0.1.4) potentially affected by unknown CVE via nftnl (0.7.0)

nftnl CARGO version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nftnl and may be impacted: - rust-network-mgr =0.1.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-2FJW-WHXM-9V4Q...

ab-av1 (>=0.1.0, <=0.4.3), ablavema (0.4.2) +1352 more potentially affected by unknown CVE via number_prefix (>=0.2.8, <=0.4.0)

numberprefix CARGO version =0.2.8, =0.1.0, =0.1.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.2, =0.0.7-alpha.1, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.7, =1.1.0, =0.1.0, =0.15.0, =0.1.0, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0119...

a2 (>=0.3.6, <=0.5.0-alpha.1), abd-clam (>=0.22.6, <=0.30.0) +5684 more potentially affected by unknown CVE via rand_os (>=0.1.3, <=0.2.2)

randos CARGO version =0.1.3, =0.3.6, =0.22.6, =0.1.0, =0.4.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.3, =0.0.1, =0.0.7-alpha.3, =0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0124...

cargo-asm crate is unmaintained

The cargo-asm crate is deprecated and no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - cargo-show-asm...

RUSTSEC-2025-0122 cargo-asm crate is unmaintained

The cargo-asm crate is deprecated and no longer actively maintained. If you rely on this crate, consider switching to a recommended alternative. Recommended alternatives - cargo-show-asm...