4 matches found
RUSTSEC-2026-0418 libz-sys build script leaks environment variables in the build directory
The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...
libz-sys build script leaks environment variables in the build directory
The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...
allsorts (>=0.9.1, <=0.13.0), cargo-update (>=8.2.0, <=10.0.1) +5 more potentially affected by unknown CVE via libz-sys (>=1.1.6, <=1.1.16)
libz-sys CARGO version =1.1.6, =0.9.1, =8.2.0, =0.8.0, =0.8.0, =0.6.0-rc.1, =0.1.0, =0.12.0, =0.19.4 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0418...
PT-2026-132764
The build script of libz-sys version = 1.1.30 prints the full environment of the build, including any secrets it contains, to its stdout when compiled with [email protected] or later on a Unix host. This affects any build that depends on libz-sys. Cargo saves build script stdout under target/, so the valu...