{"action":"Upgrade cargo to 0.67.1 or later.","affected":[{"fixed":"0.67.1","introduced":"0"}],"component":"cargo","cve_ids":["CVE-2022-46176"],"ecosystem":"crates.io","epss":0.00679,"exploited":false,"fixed_versions":["0.67.1"],"ghsa_id":"GHSA-r5w3-xm58-jv6j","id":"tcs_01M5KF2XTKHA69N2Z60KH5R44P","modified_at":"2023-11-08T04:10:56.011504Z","published_at":"2023-01-10T21:09:31Z","references":["https://osv.dev/vulnerability/GHSA-r5w3-xm58-jv6j","https://github.com/rust-lang/cargo/security/advisories/GHSA-r5w3-xm58-jv6j","https://nvd.nist.gov/vuln/detail/CVE-2022-46176","https://git-scm.com/docs/git-config#Documentation/git-config.txt-urlltbasegtinsteadOf","https://github.com/rust-lang/cargo","https://github.com/rust-lang/wg-security-response/tree/main/patches/CVE-2022-46176","https://www.rust-lang.org/policies/security","http://www.openwall.com/lists/oss-security/2023/11/05/6"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-r5w3-xm58-jv6j","url":"https://osv.dev/vulnerability/GHSA-r5w3-xm58-jv6j"}],"summary":"Cargo did not verify SSH host keys"}