Skip to content
OpenAdvisories

Package · crates.io

cargo-nextest

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    GHSA-vc25-qg58-w57c

    Arbitrary code execution when rerunning tests from a portable recording

    ## Summary Nextest versions between 0.9.125 and 0.9.149 (inclusive) allow the `cargo nextest run --rerun` (or `-R`) command with a malicious [portable recording](https://nexte.st/docs/features/record-replay-rerun/portable-recordings/) to run arbitrary code du…

    cargo-nextest crates.io