Debian/rust-cargo: medium 6.1
Cargo downloads a Rust project’s dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when including them in the report generated
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2023-40030#Debian:12/rust-cargo
- https://security-tracker.debian.org/tracker/CVE-2023-40030
published · modified · JSON