Debian/rust-cargo: medium 6.5
Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. An attacker could upload to an alternate
Action: Upgrade rust-cargo to 0.66.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.66.0-1 | - |
Fixed versions
| 0.66.0-1 |
Sources
- osv: DEBIAN-CVE-2022-36114#Debian:12/rust-cargo
- https://security-tracker.debian.org/tracker/CVE-2022-36114
published · modified · JSON