Debian/rust-cargo: medium 6.1
Cargo downloads a Rust project’s dependencies and compiles the project. Starting in Rust 1.60.0 and prior to 1.72, Cargo did not escape Cargo feature names when including them in the report generated
Action: Upgrade rust-cargo to 0.76.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.76.0-1 | - |
Fixed versions
| 0.76.0-1 |
Sources
- osv: DEBIAN-CVE-2023-40030#Debian:14/rust-cargo
- https://security-tracker.debian.org/tracker/CVE-2023-40030
published · modified · JSON