CVEs published by rust

CVEs published by rust (CVE Numbering Authority). 2 tracked.

• CVE-2026-5222 MEDIUM 6.5 UPGRADE Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index p
• CVE-2026-5223 MEDIUM 5.3 UPGRADE Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a

← Back to latest CVEs