cargo vulnerabilities

2 known vulnerabilities in cargo from Rust-lang. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  cargo: Incorrect Permission Assignment for Critical Resource

  CVE-2023-38497Aug 4, 2023Rust-lang

  Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate co

• 8.1 High severity

  cargo: Improper Link Resolution Before File Access

  CVE-2022-36113Sep 14, 2022Rust-langEPSS 1.29%

  Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the ~/.cargo folder on disk, making it available to the Rust projects it builds. To record when an extraction is successful, Cargo wr