Skip to content
OpenAdvisories

Package · crates.io

lwd-uri-util

1 known vulnerabilities.

Malicious versions reported for this package

  • MAL-2026-19058 — 0.1.3, 0.1.4, 0.1.2, 0.1.0, 0.1.1, 0.1.5, 0.1.6, 0.1.7 · Nov 10, 2026
All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    RUSTSEC-2026-0483

    `lwd-uri-util` was removed from crates.io for malicious code

    The `lwd-uri-util` crate exfiltrated SSH keys, AWS credentials, and other environmental metadata and secrets when any crate using it was built. The malicious crate had 8 versions published on 2026-11-09 approximately 12 hours before removal and had no evidenc…

    lwd-uri-util crates.io