cargo vulnerabilities (Ubuntu)
9 vulnerabilities.
-
cargoUbuntu Crates in third party registries can override the cached source of other crates 6.5 Medium -
cargoUbuntu Cargo can be coerced to share credentials between registries 2.3 Low -
cargoUbuntu tar-rs: unpack_in can chmod arbitrary directories by following symlinks 5.1 Medium -
cargoUbuntu Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports 6.1 Medium -
cargoUbuntu Cargo not respecting umask when extracting crate archives 7.8 High -
cargoUbuntu Cargo did not verify SSH host keys 5.3 Medium -
cargoUbuntu Extracting malicious crates can fill the file system 4.8 Medium -
cargoUbuntu Extracting malicious crates can corrupt arbitrary files 4.6 Medium -
cargoUbuntu Improper Restriction of Operations within the Bounds of a Memory Buffer and Race Condition in crossbeam-utils 8.1 High