Skip to content
OpenAdvisories

Package · Debian

rust-tracing-subscriber

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.3
    CVE-2025-58160

    Tracing logging user input may result in poisoning logs with ANSI escape sequences

    tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subscriber was vulnerable to ANSI escape sequence injection attacks. Untrusted user input containing ANSI escape…

    tokio-rs tracing rust-tracing-subscriber tracing-subscriber Debian Ubuntu crates.io