Rrust-lang

Products

Exploited and recent CVEs

• CVE-2024-43402 High 8.2 Rust OS Command Injection/Argument Injection vulnerability 0.7%
• CVE-2024-24576 Critical 10.0 Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows 20.3%
• CVE-2023-40030 Medium 6.1 Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports 0.9%
• CVE-2023-38497 High 7.8 Cargo not respecting umask when extracting crate archives 0.7%
• CVE-2022-46176 Medium 5.3 Cargo did not verify SSH host keys 0.7%
• CVE-2022-36114 Medium 4.8 Extracting malicious crates can fill the file system 0.9%
• CVE-2022-36113 Medium 4.6 Extracting malicious crates can corrupt arbitrary files 1.2%
• CVE-2022-24713 High 7.5 Regular expression denial of service in Rust's regex crate 14.5%
• CVE-2022-21658 High 7.3 Race condition in std::fs::remove_dir_all in rustlang 1.4%
• CVE-2020-26297 High 8.2 XSS in mdBook's search page 1.3%