Skip to content
OpenAdvisories

Package · crates.io

rage

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-4fg7-vxc8-qx5w

    rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

    A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the `rage` CLI through an attacker-controlled recipient or identity string, or to the following `age` APIs when the `plugin` …

    age rage crates.io