Debian/cargo: medium 5.9
Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. An attacker could exploi
Action: Upgrade cargo to 0.66.0+ds1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.66.0+ds1-1 | - |
Fixed versions
| 0.66.0+ds1-1 |
Sources
published · modified · JSON