CVE-2019-16760

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...

CVE-2019-16760

Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...

PT-2019-14816

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.26.0 Description The issue arises when the package configuration key in the package.toml file is used to rename dependencies. In Rust 1.25.0 and prior, this key is ignored by Cargo, potentially leading to the download ...