364 matches found
cargo: Cargo: Source code overwrite due to symlink mishandling in third-party registries
A flaw was found in Cargo. When processing crate tarballs from third-party registries, Cargo mishandled symbolic links symlinks embedded within these archives. This vulnerability enables a malicious crate to overwrite the source code of another crate originating from the same registry. Such an...