{"action":"Upgrade cargo to 0.65.0 or later.","affected":[{"fixed":"0.65.0","introduced":"0"},{"fixed":"0.67.0","introduced":"0.66.0"}],"component":"cargo","cve_ids":["CVE-2022-36114"],"ecosystem":"crates.io","epss":0.00945,"exploited":false,"fixed_versions":["0.65.0","0.67.0"],"ghsa_id":"GHSA-2hvr-h6gw-qrxp","id":"tcs_01M5KERDAC6CYFC9HT4CQV8FKJ","modified_at":"2023-11-08T04:10:01.779211Z","published_at":"2022-09-16T17:12:05Z","references":["https://osv.dev/vulnerability/GHSA-2hvr-h6gw-qrxp","https://github.com/rust-lang/cargo/security/advisories/GHSA-2hvr-h6gw-qrxp","https://nvd.nist.gov/vuln/detail/CVE-2022-36114","https://github.com/rust-lang/cargo/commit/2b68d3c07a4a056264dc006ecb9f1354a0679cd3","https://github.com/rust-lang/cargo/commit/d1f9553c825f6d7481453be8d58d0e7f117988a7","https://github.com/rust-lang/cargo/commit/d87d57dbbda61754f4fab0f329a7ac520e062c46","https://github.com/rust-lang/cargo","https://security.gentoo.org/glsa/202210-09"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-2hvr-h6gw-qrxp","url":"https://osv.dev/vulnerability/GHSA-2hvr-h6gw-qrxp"}],"summary":"Cargo extracting malicious crates can fill the file system"}