Rust vulnerabilities

3 known vulnerabilities in Rust from Rust-lang. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  rust: Improper Neutralization of Argument Delimiters in a Command

  CVE-2024-43402Sep 4, 2024Rust-lang

  Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments when invoking batch files on Windows, was incomplete. Prior to Rust version 1.81.0, it was possible to bypass the fix when the batch file na

• 9.8 Critical severity

  Node.js: Improper Neutralization of Special Elements used in a Command

  CVE-2024-3566Apr 10, 2024Node.jsEPSS 6.83%

  A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.

• 10.0 Critical severity

  rust: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-24576Apr 9, 2024Rust-langEPSS 20.3%

  Rust is a programming language. The Rust Security Response WG was notified that the Rust standard library prior to version 1.77.2 did not properly escape arguments when invoking batch files (with the `bat` and `cmd` extensions) on Windows using the `Command`.