24 results · Feed
-
Medium 6.5
Crates in third party registries can override the cached source of other crates
Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override the source code of another crate from the same registry. The severity of the vulnerability is **medium** for users of th…
-
Low 2.3
Cargo can be coerced to share credentials between registries
Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol. If a hosting provider allowed multiple registries to be hosted with arbitrary names within the same domain, an attacker able to publish crat…
-
Medium 5.1
tar-rs: unpack_in can chmod arbitrary directories by following symlinks
tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function uses fs::metadata() to check whether a path that already exists is a directory. Because fs::metadata() fo…
-
Medium 5.1
tar-rs incorrectly ignores PAX size headers if header size is nonzero
tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the PAX size header in cases where the base header size is nonzero. As part of CVE-2025-62518, the astral-tokio-tar project was changed to co…
-
Medium 6.3
Rust standard library didn't detect all path separators on Cygwin
Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target (`x86_64-pc-cygwin`) didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled…
-
High 7.3CVE-2022-21658 Public exploit
Race condition in std::fs::remove_dir_all in rustlang
Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the `std::fs::remove_dir_all` standard library function is vulnerable a race condi…
-
Unscored —
An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual…
-
Unscored —
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginn…
-
Unscored —
In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards…
-
Unscored —
In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialize…
-
Unscored —
In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchroni…
-
Unscored —
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the el…
-
Unscored —
In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent …
-
Unscored —
In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation…
-
Unscored —
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than…
-
Unscored —
In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same ind…
-
Unscored —CVE-2021-28879 Public exploit
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer ov…
-
Unscored —
In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe …
-
Unscored —
In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get…
-
Unscored —
In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once f…
-
Unscored —
The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impa…
-
Unscored —CVE-2018-1000810 Public exploit
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 conta…
-
Unscored —
Rust Programming Language Rust standard library version Commit bfa0e1f58acf1c28d500c34ed258f09ae021893e and later; stab…
-
Unscored —
The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Eleme…