Skip to content
OpenAdvisories

Product · rust

Cargo

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.6

    Cargo prior to Rust 1.26.0 may download the wrong dependency

    Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key. Usage of the `package` key to rename dependencies in `Cargo.toml` is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is u…