crates.io/users CVE-2025-5791: high 7.1, EPSS 0.20%
`root` appended to group listings
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.8.0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: RUSTSEC-2025-0040
- nvd: CVE-2025-5791
- https://crates.io/crates/users
- https://rustsec.org/advisories/RUSTSEC-2025-0040.html
- https://github.com/ogham/rust-users/issues/44
CVE-2025-5791 · published · modified · JSON