{"action":"Upgrade cargo to 0.27.0 or later.","affected":[{"fixed":"0.27.0","introduced":"0"}],"component":"cargo","cve_ids":["CVE-2019-16760"],"ecosystem":"crates.io","epss":0.0126,"exploited":false,"fixed_versions":["0.27.0"],"ghsa_id":"GHSA-9f3p-wvj7-q82x","id":"tcs_01M5KEWBF289P7F21HXJ9BZ7EY","modified_at":"2026-09-10T03:49:38.253152249Z","published_at":"2022-05-24T16:57:30Z","references":["https://osv.dev/vulnerability/GHSA-9f3p-wvj7-q82x","https://github.com/rust-lang/rust/security/advisories/GHSA-phjm-8x66-qw4r","https://nvd.nist.gov/vuln/detail/CVE-2019-16760","https://gist.github.com/pietroalbini/0d293b24a44babbeb6187e06eebd4992","https://groups.google.com/forum/#!topic/rustlang-security-announcements/rVQ5e3TDnpQ","https://groups.google.com/forum/#%21topic/rustlang-security-announcements/rVQ5e3TDnpQ","http://www.openwall.com/lists/oss-security/2019/10/08/3"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9f3p-wvj7-q82x","url":"https://osv.dev/vulnerability/GHSA-9f3p-wvj7-q82x"}],"summary":"Cargo prior to Rust 1.26.0 may download the wrong dependency"}