CVE-2022-46176
1 advisory.
crates.io/cargo CVE-2022-46176: medium 5.3
Cargo did not verify SSH host keys
Action: Upgrade cargo to 0.67.1 or later.
cargo update -p cargo --precise 0.67.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.67.1 | - |
Fixed versions
| 0.67.1 |
Sources
- osv: GHSA-r5w3-xm58-jv6j
- https://github.com/rust-lang/cargo/security/advisories/GHSA-r5w3-xm58-jv6j
- https://nvd.nist.gov/vuln/detail/CVE-2022-46176
- https://git-scm.com/docs/git-config#Documentation/git-config.txt-urlltbasegtinsteadOf
- https://github.com/rust-lang/cargo
- https://github.com/rust-lang/wg-security-response/tree/main/patches/CVE-2022-46176
- https://www.rust-lang.org/policies/security
- http://www.openwall.com/lists/oss-security/2023/11/05/6
CVE-2022-46176 · published · modified · JSON