Build environment compiled into the library and readable at runtime

The build script of rustpython-vm 0.3.0 through 0.5.0 writes every environment variable of the build into $OUTDIR/envvars.rs. The crate compiles that file into sysconfigdata's buildtimevars. That module is always compiled. A binary built in CI with secrets in the environment carries those secrets...

PT-2026-125053

The build script of rustpython-vm 0.3.0 through 0.5.0 writes every environment variable of the build into $OUT DIR/env vars.rs. The crate compiles that file into sysconfigdata's build time vars. That module is always compiled. A binary built in CI with secrets in the environment carries those...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +1 more potentially affected by unknown CVE via unic (>=0.7.0, <=0.9.0)

unic CARGO version =0.7.0, =0.1.0, =0.1.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0095...

rustpython-vm (>=0.1.0, <=0.1.1), unic (>=0.8.0, <=0.9.0) +3 more potentially affected by unknown CVE via unic-char-basics (>=0.8.0, <=0.9.0)

unic-char-basics CARGO version =0.8.0, =0.1.0, =0.8.0, =0.8.0, =0.8.0, =0.8.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0093...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via unic-char (>=0.6.0, <=0.9.0)

unic-char CARGO version =0.6.0, =0.1.0, =0.1.0, =0.6.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0086...

rev-up-your-harley (>=0.1.0, <=1.0.1), rustpython-vm (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via unic-emoji (>=0.7.0, <=0.9.0)

unic-emoji CARGO version =0.7.0, =0.1.0, =0.1.0, =0.7.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0084...

doge_dns (>=0.2.4-beta, <=1.0.2), rev-up-your-harley (>=0.1.0, <=1.0.1) +3 more potentially affected by unknown CVE via unic-idna (>=0.5.0, <=0.9.0)

unic-idna CARGO version =0.5.0, =0.2.4-beta, =0.1.0, =0.1.0, =0.5.0, =0.7.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0085...