cargo vulnerabilities (Debian)
13 vulnerabilities.
-
cargoDebian Crates in third party registries can override the cached source of other crates 6.5 Medium -
cargoDebian Cargo can be coerced to share credentials between registries 2.3 Low -
cargoDebian Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports 6.1 Medium -
cargoDebian Cargo not respecting umask when extracting crate archives 7.8 High -
cargoDebian Cargo did not verify SSH host keys 5.3 Medium -
cargoDebian Extracting malicious crates can fill the file system 4.8 Medium -
cargoDebian Extracting malicious crates can corrupt arbitrary files 4.6 Medium -
cargoDebian Cargo prior to Rust 1.26.0 may download the wrong dependency 4.6 Medium -
cargoDebian The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1... 5.9 Medium -
cargoDebian The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote... 7.5 High -
cargoDebian Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart... 9.8 Critical -
cargoDebian The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a... 5.5 Medium -
cargoDebian The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to... 5.5 Medium